dev-master
9999999-devProvides an API Security Firewall based on AccessToken in Request header
GPLv2
The Requires
Wallogit.com
2017 © Pedro Peláez
Provides an API Security Firewall based on AccessToken in Request header
Secures an API access checking AccessToken header to authenticate a user., (*1)
The API Firewall expects a "AccessToken" parameter in each Request header. If the AccessToken is valid then an ApiToken is introduced in the SecurityContext., (*2)
In order to create new AccessTokens a UsernamePasswordLoginManager is provided. It expects an username/password combination, and delegates its validation to a firewall (configurable, 'main' by default). When the username/password combination is correct then a new AccessToken is created., (*3)
A SecurityController is also included, it is prepared to work with FOSRestBundle and creates an "AccessToken" resource to provide an REST way to login. I.E GET /api/v2/accesstoken?username=user&password=pass, (*4)
Document installation and configuration (security.yml, routing.yml, ... ), (*5)
Make AccessToken parameter name configurable, (*6)
Add an entity listener to remove accesstokens when user credentials are removed., (*7)
Provides an API Security Firewall based on AccessToken in Request header
GPLv2