I propose to add agetSession() method to theKernelBrowser class to be able to prepare the session before sending a HTTP request in a functionnal test. It could be used to preset CSRF tokens, A/B testing data, user preferences, or any stateful information required for the test.

I also propose to usegetSession() in theloginUser() method. Then, the session could be preset either before or after the login, without risking to be overwritten.

publicfunctiontestForm(){$client =self::createClient();$client->loginUser(newInMemoryUser('admin',null));$session =$client->getSession();$session->set('_csrf/form','123456789');$session->set('foo','bar');$session->save();$client->request('POST','/form', ['form' => ['_token' =>'123456789']]);}

In this example, the session will contain :

array:3 ["_security_main" =>"O:52:"Symfony\Bundle\FrameworkBundle\Test\TestBrowserToken":2:{i:0;s:4:"main";i:1;a:5:{i:0;O:49:"Symfony\Component\Security\Core\User\InMemoryUser":4:{s:59:"\x00Symfony\Component\Security\Core\User\InMemoryUser\x00username";s:5:"admin";s:59:"\x00Symfony\Component\Security\Core\User\InMemoryUser\x00password";N;s:56:"\x00Symfony\Component\Security\Core\User\InMemoryUser\x00roles";a:0:{}s:58:"\x00Symfony\Component\Security\Core\User\InMemoryUser\x00enabled";b:1;}i:1;b:1;i:2;N;i:3;a:0:{}i:4;a:0:{}}}","_csrf/form" =>"123456789","foo" =>"bar"]

Thanks in advance for your feedbacks 😄

carsonbot added Status: Needs Review Feature FrameworkBundle labels

Jul 13, 2025

carsonbot added this to the7.4 milestone

Jul 13, 2025

VincentLanglet reviewed

Jul 15, 2025

View reviewed changes

src/Symfony/Bundle/FrameworkBundle/Tests/Functional/SessionTest.php

Comment on lines +49 to +51

		$session = $client->getSession();
		$session->set('name', 'drak');
		$session->save();

Copy link

Contributor

VincentLangletJul 15, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

I would expect the following behavior

        $session = $client->getSession();        $session->set('name', 'drak');        $session->save();                $session = $client->getSession();        $session->set('foo', 'bar');        $session->save();                $crawler = $client->request('GET', '/session');        $this->assertStringContainsString('Welcome back drak, nice to meet you.', $crawler->text());

meaning we're not resetting the session when callingget.

Could you add it to the test ?