Waaaa, no fair, unexpected nasty bug message on prod? Boo.
Yup, this one just caught me out – and thankfully my good buddy, brother, and friend managed to pick it up whilst doing some ad-hoc Quality Assurance checks.
Disclaimer: This site may have been in prod, but only just, this was the first release to live 🙂 So no major foul.
Disclaimer part 2: Yes, there is now a passing Codeception acceptance test to make sure this never happens again 🙂
Ok, so this is the bug message (mainly for Google users benefit):
UPDATE `your_table_name` SET exception 'Symfony\Component\Security\Core\Exception\BadCredentialsException' with message 'Bad credentials' in /var/www/html/mysite.dev/vendor/symfony/symfony/src/Symfony/Component/Security/Core/Authentication/Provider/UserAuthenticationProvider.php:73
Stack trace: #0 /var/www/html/mysite.dev/app/cache/prod/classes.php(120): session_start() #1 /var/www/html/mysite.dev/app/cache/prod/classes.php(198): Symfony\Component\HttpFoundation\Session\Storage\NativeSessionStorage->start() #2 /var/www/html/mysite.dev/app/cache/prod/classes.php(498): Symfony\Component\HttpFoundation\Session\Storage\NativeSessionStorage->getBag('attributes') #3 /var/www/html/mysite.dev/vendor/symfony/symfony/src/Symfony/Component/Security/Http/Firewall/ContextListener.php(76): Symfony\Component\HttpFoundation\Session\Session->get('_security_main') #4 /var/www/html/mysite.dev/app/cache/prod/classes.php(2463): Symfony\Component\Security\Http\Firewall\ContextListener->handle(Object(Symfony\Component\HttpKernel\Event\GetResponseEvent)) #5 [internal function]: Symfony\Component\Security\Http\Firewall->onKernelRequest(Object(Symfony\Component\HttpKernel\Event\GetResponseEvent), 'kernel.request', Object(Symfony\Component\EventDispatcher\ContainerAwareEventDispatcher)) #6 /var/www/html/mysite.dev/app/cache/prod/classes.php(1750): call_user_func(Array, Object(Symfony\Component\HttpKernel\Event\GetResponseEvent), 'kernel.request', Object(Symfony\Component\EventDispatcher\ContainerAwareEventDispatcher)) #7 /var/www/html/mysite.dev/app/cache/prod/classes.php(1683): Symfony\Component\EventDispatcher\EventDispatcher->doDispatch(Array, 'kernel.request', Object(Symfony\Component\HttpKernel\Event\GetResponseEvent)) #8 /var/www/html/mysite.dev/app/cache/prod/classes.php(1847): Symfony\Component\EventDispatcher\EventDispatcher->dispatch('kernel.request', Object(Symfony\Component\HttpKernel\Event\GetResponseEvent)) #9 /var/www/html/mysite.dev/app/bootstrap.php.cache(2965): Symfony\Component\EventDispatcher\ContainerAwareEventDispatcher->dispatch('kernel.request', Object(Symfony\Component\HttpKernel\Event\GetResponseEvent)) #10 /var/www/html/mysite.dev/app/bootstrap.php.cache(2938): Symfony\Component\HttpKernel\HttpKernel->handleRaw(Object(Symfony\Component\HttpFoundation\Request), 1) #11 /var/www/html/mysite.dev/app/bootstrap.php.cache(3087): Symfony\Component\HttpKernel\HttpKernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true) #12 /var/www/html/mysite.dev/app/bootstrap.php.cache(2337): Symfony\Component\HttpKernel\DependencyInjection\ContainerAwareHttpKernel->handle(Object(Symfony\Component\HttpFoundation\Request), 1, true) #13 /var/www/html/mysite.dev/web/app.php(27): Symfony\Component\HttpKernel\Kernel->handle(Object(Symfony\Component\HttpFoundation\Request)) #14 {main}
Lovely job.
Anyway, this was a pretty simple fix, even though there isn’t much about this on Google.
As part of this project, I needed to overwrite the default FOS User Bundle templates with my own. A pretty typical task tbh.
As it happened though, I had removed kept the FOS User Bundle error logic, but removed the translation part.
Something like this:
{% trans_default_domain 'FOSUserBundle' %}
{% block fos_user_content %} {% if error %}
{{ error.messageKey|trans(error.messageData, 'security') }}
{% endif %}
And I had gone ahead and changed that in my template to something like this:
{% block content %} {% if error %}
{{ error.messageKey|trans(error.messageData, 'security') }}
{% endif %} {% endblock %}
So I had removed the trans_default_domain, which in turn, was – as far as I can tell – then simply rendering out the full stack trace.
I’m not sure if FOSUserBundle catches that error, and then translates it? That seems kinda unusual to me.
Anyway, hopefully this saves someone some time, someday, some time soon 😉
