NotificationsYou must be signed in to change notification settings
Fork9.7k
Star30.7k

[Security] Add security:oidc-token:generate command#60660

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

fabpot merged 1 commit intosymfony:7.4fromJean-Beru:security/generate-oidc-command

Oct 6, 2025

Merged

[Security] Add security:oidc-token:generate command#60660

fabpot merged 1 commit intosymfony:7.4fromJean-Beru:security/generate-oidc-command

Oct 6, 2025

Conversation

Copy link

Contributor

Jean-Beru commentedJun 3, 2025•
edited
Loading

Q	A
Branch?	7.4
Bug fix?	no
New feature?	yes (should I create the CHANGELOG-7.4.md file?)
Deprecations?	no
Issues
License	MIT

TheOidcTokenHandler, introduced in Symfony 6.3, allows to decode a JWT token, validate it and retrieve the user info from it.

This pull request introduces a new Symfony command,bin/console security:oidc-token:generate, designed to facilitate the generation of JWTs. It can be useful for generating a token for testing purpose.

Argument and options

Description:  Generate an OIDC token for a given userUsage:  security:oidc-token:generate [options] [--] <user-identifier>Arguments:  user-identifier              User identifierOptions:      --firewall=FIREWALL      Firewall      --algorithm=ALGORITHM    Algorithm name to use to sign      --issuer=ISSUER          Set the Issuer claim (iss)      --ttl=TTL                Set the Expiration Time claim (exp) (time to live in seconds)      --not-before=NOT-BEFORE  Set the Not Before claim (nbf)

Usage

php bin/console security:oidc-token:generate jane.doe@example.com \  --firewall="api" \  --algorithm="HS256" \  --issuer="https://example.com" \  --ttl=7200 \  --not-before=tomorrow

Tip

When there is only one value, both "firewall", "algorithm" and "issuer" are not required..

Jean-Beru requested a review fromchalasr as acode owner

June 3, 2025 14:35

carsonbot added Status: Needs Review Feature Security labels

Jun 3, 2025

carsonbot added this to the7.4 milestone

Jun 3, 2025

Jean-Beru force-pushed thesecurity/generate-oidc-command branch from4fba1cd tod5b0868Compare

June 3, 2025 14:56

Copy link

Member

chalasr commentedJun 6, 2025

Good call 👍I would make "token" or "jwt" part of the command name though as I find "oidc:generate" rather confusing (yup, no better suggestion yet 🙃).

Jean-Beru changed the title~~[Security] Add security:oidc:generate command~~[Security] Add security:oidc-token:generate command

Jun 6, 2025

Copy link

ContributorAuthor

Jean-Beru commentedJun 6, 2025

Good call 👍I would make "token" or "jwt" part of the command name though as I find "oidc:generate" rather confusing (yup, no better suggestion yet 🙃).

Sure! Not more inspired than you, I renamed it tooidc-token:generate 😅

Spomky approved these changes

Jun 11, 2025

View reviewed changes

Copy link

Contributor

Spomky left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

That's a nice idea!
No remarks for this PR and OK with the nameoidc-token:generate.

carsonbot added Status: Reviewed and removed Status: Needs Review labels

Jun 11, 2025

Copy link

Member

chalasr commentedJun 11, 2025

Maybesecurity:oidc:generate-token would be more future-proof?

stof requested changes

Jun 11, 2025

View reviewed changes

...y/Bundle/SecurityBundle/DependencyInjection/Security/AccessToken/OidcTokenHandlerFactory.phpShow resolvedHide resolved

src/Symfony/Component/Security/Http/Command/OidcTokenGenerateCommand.phpShow resolvedHide resolved

src/Symfony/Component/Security/Http/AccessToken/Oidc/OidcTokenGenerator.php OutdatedShow resolvedHide resolved

carsonbot added Status: Needs Work and removed Status: Reviewed labels

Jun 11, 2025

Copy link

Member

stof commentedJun 11, 2025

I like thesecurity:oidc:generate-token name suggested by@chalasr as it makes it possible to add more commands related tooidc in the future even for other purposes.

Copy link

ContributorAuthor

Jean-Beru commentedJun 16, 2025

I like thesecurity:oidc:generate-token name suggested by@chalasr as it makes it possible to add more commands related tooidc in the future even for other purposes.

OK, let's go withsecurity:oidc:generate-token 🚀