From 03425024fe394dfc7b6a679815a9bfb8b3795df1 Mon Sep 17 00:00:00 2001
From: Marijn Doeve <marijn@doeve.me>
Date: Thu, 21 May 2026 21:38:31 +0200
Subject: [PATCH] Fix Remember me (#111)

---
 AGENTS.md => .junie/AGENTS.md              |  0
 config/packages/security.yaml              |  5 ++-
 src/Controller/LoginController.php         |  1 -
 templates/backoffice/login/login.html.twig | 52 ++++++++++------------
 4 files changed, 27 insertions(+), 31 deletions(-)
 rename AGENTS.md => .junie/AGENTS.md (100%)

diff --git a/AGENTS.md b/.junie/AGENTS.md
similarity index 100%
rename from AGENTS.md
rename to .junie/AGENTS.md
diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index 772e1e9..6cc4cc2 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -24,7 +24,10 @@ security:
                 default_target_path: tvdt_backoffice_index
             logout:
                 path: tvdt_login_logout
-            
+            remember_me:
+                secret: '%kernel.secret%'
+                lifetime: 604800 # 1 week in seconds
+
     access_control:
         - { path: ^/admin, roles: ROLE_ADMIN }
         - { path: ^/backoffice, roles: ROLE_USER }
diff --git a/src/Controller/LoginController.php b/src/Controller/LoginController.php
index 477b4ee..eda6fb2 100644
--- a/src/Controller/LoginController.php
+++ b/src/Controller/LoginController.php
@@ -8,7 +8,6 @@ use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Attribute\AsController;
 use Symfony\Component\Routing\Attribute\Route;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
-use Symfony\Component\Security\Core\User\UserInterface;
 use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
 use Symfony\Contracts\Translation\TranslatorInterface;
 use Tvdt\Enum\FlashType;
diff --git a/templates/backoffice/login/login.html.twig b/templates/backoffice/login/login.html.twig
index d2ca0ef..a306a63 100644
--- a/templates/backoffice/login/login.html.twig
+++ b/templates/backoffice/login/login.html.twig
@@ -3,39 +3,33 @@
 {% block title %}Log in{% endblock %}
 
 {% block body %}
-    {% if app.user %}
+    <form method="post">
+        <h1 class="py-2 h3 mb-3 font-weight-normal">{{ 'Please sign in'|trans }}</h1>
         <div class="mb-3">
-            You are logged in as {{ app.user.userIdentifier }}, <a href="{{ path('tvdt_login_logout') }}">Logout</a>
+            <label for="username" class="form-label">{{ 'Email'|trans }}</label>
+            <input type="email" value="{{ last_username }}" name="_username" id="username" class="form-control"
+                   autocomplete="email" required autofocus>
         </div>
-    {% else %}
-        <form method="post">
-            <h1 class="py-2 h3 mb-3 font-weight-normal">{{ 'Please sign in'|trans }}</h1>
-            <div class="mb-3">
-                <label for="username" class="form-label">{{ 'Email'|trans }}</label>
-                <input type="email" value="{{ last_username }}" name="_username" id="username" class="form-control"
-                       autocomplete="email" required autofocus>
-            </div>
 
-            <div class="mb-3">
-                <label for="password" class="form-label">{{ 'Password'|trans }}</label>
-                <input type="password" name="_password" id="password" class="form-control"
-                       autocomplete="current-password"
-                       required>
-            </div>
+        <div class="mb-3">
+            <label for="password" class="form-label">{{ 'Password'|trans }}</label>
+            <input type="password" name="_password" id="password" class="form-control"
+                   autocomplete="current-password"
+                   required>
+        </div>
 
-            <input type="hidden" name="_csrf_token" data-controller="csrf-protection"
-                   value="{{ csrf_token('authenticate') }}">
+        <input type="hidden" name="_csrf_token" data-controller="csrf-protection"
+               value="{{ csrf_token('authenticate') }}">
 
-            <div class="mb-3 form-check">
-                <input type="checkbox" name="_remember_me" id="_remember_me" class="form-check-input">
-                <label for="_remember_me" class="form-check-label">{{ 'Remember me'|trans }}</label>
-            </div>
+        <div class="mb-3 form-check">
+            <input type="checkbox" name="_remember_me" id="_remember_me" class="form-check-input" checked>
+            <label for="_remember_me" class="form-check-label">{{ 'Remember me'|trans }}</label>
+        </div>
 
-            <button class="btn btn-lg btn-primary" type="submit">
-                {{ 'Sign in'|trans }}
-            </button>
-            <a href="{{ path('tvdt_register') }}"
-               class="btn btn-link">{{ 'Create an account'|trans }}</a>
-        </form>
-    {% endif %}
+        <button class="btn btn-lg btn-primary" type="submit">
+            {{ 'Sign in'|trans }}
+        </button>
+        <a href="{{ path('tvdt_register') }}"
+           class="btn btn-link">{{ 'Create an account'|trans }}</a>
+    </form>
 {% endblock %}