Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
1.76 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.05 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    One thing I was always wondering about the OTP feature: If OTPs are used for two-factor authentication but both your password and the OTP can be accessed through Bitwarden, aren’t you effectively sidestepping the two-factor part? I mean if I have the OTPs only on my phone then I need to **know** the Bitwarden master password and I need to **have** my phone in order to log in. On the other hand if both are in the Bitwarden vault, I only need to **know** the Bitwarden password. So effectively two-factor becomes one-factor authentication.\n
    \n
    Maybe the relevant scenario here is your credentials for some website getting leaked. With OTPs inside Bitwarden any attacker would still not be able to log in as long as they don’t know your master password, giving you plenty of time to change your password. Although, if the attacker already found a way to access confidential website logins, they can probably access all kinds of other confidential data related to this account without even logging in as you.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1689237667 {#1605
    date: 2023-07-13 10:41:07.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@001100010010@lemmy.dbzer0.com"
    "@miikaroo@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 14564
  -bodyTs: "'abl':126 'access':29,158,165 'account':175 'alreadi':153 'although':149 'alway':5 'aren':32 'attack':121,152 'authent':19,102 'becom':98 'bitwarden':31,59,83,91,119 'chang':146 'confidenti':159,170 'credenti':110 'data':171 'effect':35,94 'even':177 'factor':18,40,97,101 'featur':10 'found':154 'get':114 'give':140 'hand':77 'insid':118 'kind':167 'know':57,89,136 'leak':115 'log':72,128,178 'login':161 'long':131 'master':60,138 'mayb':103 'mean':43 'need':55,64,87 'one':1,100 'one-factor':99 'order':70 'otp':9,12,26,48,117 'part':41 'password':23,61,92,139,148 'phone':52,68 'plenti':142 'probabl':164 'relat':172 'relev':105 'scenario':106 'sidestep':36 'still':123 'thing':2 'time':144 'two':17,39,96 'two-factor':16,38,95 'use':14 'vault':84 'way':156 'websit':113,160 'without':176 'wonder':6 'would':122"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/1128315"
  +editedAt: null
  +createdAt: DateTimeImmutable @1689237667 {#1945
    date: 2023-07-13 10:41:07.0 +02:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    One thing I was always wondering about the OTP feature: If OTPs are used for two-factor authentication but both your password and the OTP can be accessed through Bitwarden, aren’t you effectively sidestepping the two-factor part? I mean if I have the OTPs only on my phone then I need to **know** the Bitwarden master password and I need to **have** my phone in order to log in. On the other hand if both are in the Bitwarden vault, I only need to **know** the Bitwarden password. So effectively two-factor becomes one-factor authentication.\n
    \n
    Maybe the relevant scenario here is your credentials for some website getting leaked. With OTPs inside Bitwarden any attacker would still not be able to log in as long as they don’t know your master password, giving you plenty of time to change your password. Although, if the attacker already found a way to access confidential website logins, they can probably access all kinds of other confidential data related to this account without even logging in as you.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1689237667 {#1605
    date: 2023-07-13 10:41:07.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@001100010010@lemmy.dbzer0.com"
    "@miikaroo@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 14564
  -bodyTs: "'abl':126 'access':29,158,165 'account':175 'alreadi':153 'although':149 'alway':5 'aren':32 'attack':121,152 'authent':19,102 'becom':98 'bitwarden':31,59,83,91,119 'chang':146 'confidenti':159,170 'credenti':110 'data':171 'effect':35,94 'even':177 'factor':18,40,97,101 'featur':10 'found':154 'get':114 'give':140 'hand':77 'insid':118 'kind':167 'know':57,89,136 'leak':115 'log':72,128,178 'login':161 'long':131 'master':60,138 'mayb':103 'mean':43 'need':55,64,87 'one':1,100 'one-factor':99 'order':70 'otp':9,12,26,48,117 'part':41 'password':23,61,92,139,148 'phone':52,68 'plenti':142 'probabl':164 'relat':172 'relev':105 'scenario':106 'sidestep':36 'still':123 'thing':2 'time':144 'two':17,39,96 'two-factor':16,38,95 'use':14 'vault':84 'way':156 'websit':113,160 'without':176 'wonder':6 'would':122"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/1128315"
  +editedAt: null
  +createdAt: DateTimeImmutable @1689237667 {#1945
    date: 2023-07-13 10:41:07.0 +02:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\EntryComment {#1366
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1832 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "asklemmy@lemmy.ml"
    +title: "asklemmy"
    +description: """
      A loosely moderated place to ask open-ended questions\n
      \n
      **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
      \n
      If your post meets the following criteria, it’s welcome here!\n
      \n
      1. Open-ended\n
      2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
      3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
      4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
      5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
      \n
      Support alternatives:\n
      \n
      - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
      - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
      - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
      \n
      ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
      """
    +rules: null
    +subscriptionsCount: 0
    +entryCount: 580
    +entryCommentCount: 15558
    +postCount: 7
    +postCommentCount: 129
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1689748304 {#321
      date: 2023-07-19 08:31:44.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 9
    +apId: "asklemmy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/asklemmy"
    +apPublicUrl: "https://lemmy.ml/c/asklemmy"
    +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "asklemmy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1689747596 {#322
      date: 2023-07-19 08:19:56.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1686889707 {#316
      date: 2023-06-16 06:28:27.0 +02:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2356 …}
  +body: """
    One thing I was always wondering about the OTP feature: If OTPs are used for two-factor authentication but both your password and the OTP can be accessed through Bitwarden, aren’t you effectively sidestepping the two-factor part? I mean if I have the OTPs only on my phone then I need to **know** the Bitwarden master password and I need to **have** my phone in order to log in. On the other hand if both are in the Bitwarden vault, I only need to **know** the Bitwarden password. So effectively two-factor becomes one-factor authentication.\n
    \n
    Maybe the relevant scenario here is your credentials for some website getting leaked. With OTPs inside Bitwarden any attacker would still not be able to log in as long as they don’t know your master password, giving you plenty of time to change your password. Although, if the attacker already found a way to access confidential website logins, they can probably access all kinds of other confidential data related to this account without even logging in as you.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1689237667 {#1605
    date: 2023-07-13 10:41:07.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@001100010010@lemmy.dbzer0.com"
    "@miikaroo@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2476 …}
  +nested: Doctrine\ORM\PersistentCollection {#2288 …}
  +votes: Doctrine\ORM\PersistentCollection {#2446 …}
  +reports: Doctrine\ORM\PersistentCollection {#2439 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2488 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1841 …}
  -id: 14564
  -bodyTs: "'abl':126 'access':29,158,165 'account':175 'alreadi':153 'although':149 'alway':5 'aren':32 'attack':121,152 'authent':19,102 'becom':98 'bitwarden':31,59,83,91,119 'chang':146 'confidenti':159,170 'credenti':110 'data':171 'effect':35,94 'even':177 'factor':18,40,97,101 'featur':10 'found':154 'get':114 'give':140 'hand':77 'insid':118 'kind':167 'know':57,89,136 'leak':115 'log':72,128,178 'login':161 'long':131 'master':60,138 'mayb':103 'mean':43 'need':55,64,87 'one':1,100 'one-factor':99 'order':70 'otp':9,12,26,48,117 'part':41 'password':23,61,92,139,148 'phone':52,68 'plenti':142 'probabl':164 'relat':172 'relev':105 'scenario':106 'sidestep':36 'still':123 'thing':2 'time':144 'two':17,39,96 'two-factor':16,38,95 'use':14 'vault':84 'way':156 'websit':113,160 'without':176 'wonder':6 'would':122"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/1128315"
  +editedAt: null
  +createdAt: DateTimeImmutable @1689237667 {#1945
    date: 2023-07-13 10:41:07.0 +02:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED edit
App\Entity\Magazine {#313
  +icon: Proxies\__CG__\App\Entity\Image {#294 …}
  +name: "asklemmy@lemmy.ml"
  +title: "asklemmy"
  +description: """
    A loosely moderated place to ask open-ended questions\n
    \n
    **[Search asklemmy](https://lemmy.ml/search?q=&type=Posts&listingType=All&communityId=8&page=1&sort=TopAll) 🔍**\n
    \n
    If your post meets the following criteria, it’s welcome here!\n
    \n
    1. Open-ended\n
    2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions\n
    3. **Not regarding using or support for Lemmy**: [context](https://lemmy.ml/post/1223478), find help in the list of support alternatives below\n
    4. Not ad nauseam inducing: please make sure it is a question that would be new to most members\n
    5. [An actual topic of discussion](https://lemmy.ml/post/1239589)\n
    \n
    Support alternatives:\n
    \n
    - [!lemmy_support@lemmy.ml](https://lemmy.ml/c/lemmy_support)\n
    - [!nostupidlemmyquestions@lemmy.dbzer0.com](https://lemmy.dbzer0.com/c/nostupidlemmyquestions)\n
    - [!selfhosted@lemmy.world](https://lemmy.world/c/selfhosted)\n
    \n
    ~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
    """
  +rules: null
  +subscriptionsCount: 0
  +entryCount: 580
  +entryCommentCount: 15558
  +postCount: 7
  +postCommentCount: 129
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1689748304 {#321
    date: 2023-07-19 08:31:44.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#285 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
  +entries: Doctrine\ORM\PersistentCollection {#228 …}
  +posts: Doctrine\ORM\PersistentCollection {#186 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
  +bans: Doctrine\ORM\PersistentCollection {#165 …}
  +reports: Doctrine\ORM\PersistentCollection {#151 …}
  +badges: Doctrine\ORM\PersistentCollection {#129 …}
  +logs: Doctrine\ORM\PersistentCollection {#119 …}
  +awards: Doctrine\ORM\PersistentCollection {#108 …}
  +categories: Doctrine\ORM\PersistentCollection {#95 …}
  -id: 9
  +apId: "asklemmy@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/asklemmy"
  +apPublicUrl: "https://lemmy.ml/c/asklemmy"
  +apFollowersUrl: "https://lemmy.ml/c/asklemmy/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "asklemmy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1689747596 {#322
    date: 2023-07-19 08:19:56.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1686889707 {#316
    date: 2023-06-16 06:28:27.0 +02:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details