dev-master
9999999-devProvides an API Security Firewall based on AccessToken in Request header
GPLv2
The Requires
Provides an API Security Firewall based on AccessToken in Request header
Secures an API access checking AccessToken header to authenticate a user., (*1)
The API Firewall expects a "AccessToken" parameter in each Request header. If the AccessToken is valid then an ApiToken is introduced in the SecurityContext., (*2)
In order to create new AccessTokens a UsernamePasswordLoginManager is provided. It expects an username/password combination, and delegates its validation to a firewall (configurable, 'main' by default). When the username/password combination is correct then a new AccessToken is created., (*3)
A SecurityController is also included, it is prepared to work with FOSRestBundle and creates an "AccessToken" resource to provide an REST way to login. I.E GET /api/v2/accesstoken?username=user&password=pass, (*4)
Document installation and configuration (security.yml, routing.yml, ... ), (*5)
Make AccessToken parameter name configurable, (*6)
Add an entity listener to remove accesstokens when user credentials are removed., (*7)
Provides an API Security Firewall based on AccessToken in Request header
GPLv2