public function tokenAction(Request $request)
    {
        $formName = $request->get('form');
        $csrfToken = $this->get('security.csrf.token_manager')->getToken(
            $request->get('form')
        )->getValue();

        $content = $csrfToken;

        // this should be the default behaviour in future because for varnish its needed
        if ($request->get('html')) {
            $content = sprintf(
                '<input type="hidden" id="%s__token" name="%s[_token]" value="%s" />',
                $formName,
                $formName,
                $csrfToken
            );
        }

        $response = new Response($content);

        /* Deactivate Cache for this token action */
        $response->setSharedMaxAge(0);
        $response->setMaxAge(0);
        // set shared will set the request to public so it need to be done after shared max set to 0
        $response->setPrivate();
        $response->headers->addCacheControlDirective('no-cache', true);
        $response->headers->addCacheControlDirective('must-revalidate', true);
        $response->headers->addCacheControlDirective('no-store', true);

        return $response;
    }
public function tokenAction(Request $request)
    {
        $formName = $request->get('form');
        $csrfToken = $this->get('security.csrf.token_manager')->getToken(
            $request->get('form')
        )->getValue();

        $content = $csrfToken;

        // this should be the default behaviour in future because for varnish its needed
        if ($request->get('html')) {
            $content = sprintf(
                '<input type="hidden" id="%s__token" name="%s[_token]" value="%s" />',
                $formName,
                $formName,
                $csrfToken
            );
        }

        $response = new Response($content);

        /* Deactivate Cache for this token action */
        $response->setSharedMaxAge(0);
        $response->setMaxAge(0);
        // set shared will set the request to public so it need to be done after shared max set to 0
        $response->setPrivate();
        $response->headers->addCacheControlDirective('no-cache', true);
        $response->headers->addCacheControlDirective('must-revalidate', true);
        $response->headers->addCacheControlDirective('no-store', true);

        return $response;
    }
public function tokenAction ( Request $ request ) { $ formName = $ request -> get ( 'form' ) ; $ csrfToken = $ this -> get ( 'security.csrf.token_manager' ) -> getToken ( $ request -> get ( 'form' ) ) -> getValue ( ) ; $ content = $ csrfToken ; // this should be the default behaviour in future because for varnish its needed if ( $ request -> get ( 'html' ) ) { $ content = sprintf ( '<input type="hidden" id="%s__token" name="%s[_token]" value="%s" />' , $ formName , $ formName , $ csrfToken ) ; } $ response = new Response ( $ content ) ; /* Deactivate Cache for this token action */ $ response -> setSharedMaxAge ( 0 ) ; $ response -> setMaxAge ( 0 ) ; // set shared will set the request to public so it need to be done after shared max set to 0 $ response -> setPrivate ( ) ; $ response -> headers -> addCacheControlDirective ( 'no-cache' , true ) ; $ response -> headers -> addCacheControlDirective ( 'must-revalidate' , true ) ; $ response -> headers -> addCacheControlDirective ( 'no-store' , true ) ; return $ response ; }
Generates a token for the form.

@param Request $request

@return Response
Generates a token for the form .