When I do something like this in security.yml: firewalls: secured_api: pattern: ^/API/.* stateless: true http_basic: provider: in_memory
My first symfony response contains coockie but it should not because I put stateless: true? Here is my response header: HTTP/1.0 401 A Token was not found in the SecurityContext. Date: Sat, 10 Dec 2011 13:36:05 GMT Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8r DAV/2 PHP/ 5.3.6 X-Powered-By: PHP/5.3.6 Set-Cookie: PHPSESSID=5dda93897d4ca5dbc3c38a8dcb94d909; path=/ cache-control: no-cache www-authenticate: Basic realm="Secured Area" x-debug-token: 4ee360456f66b Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Adam -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony developers" group. To post to this group, send email to symfony-devs@googlegroups.com To unsubscribe from this group, send email to symfony-devs+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-devs?hl=en