2017 © Pedro Peláez
 

symfony-bundle access-token-security-bundle

Provides an API Security Firewall based on AccessToken in Request header

image

nazka/access-token-security-bundle

Provides an API Security Firewall based on AccessToken in Request header

  • Monday, March 31, 2014
  • by jsampedro77
  • Repository
  • 1 Watchers
  • 1 Stars
  • 58 Installations
  • PHP
  • 0 Dependents
  • 0 Suggesters
  • 0 Forks
  • 0 Open issues
  • 1 Versions
  • 0 % Grown

The README.md

AccessToken Security Bundle

Secures an API access checking AccessToken header to authenticate a user., (*1)

The API Firewall expects a "AccessToken" parameter in each Request header. If the AccessToken is valid then an ApiToken is introduced in the SecurityContext., (*2)

In order to create new AccessTokens a UsernamePasswordLoginManager is provided. It expects an username/password combination, and delegates its validation to a firewall (configurable, 'main' by default). When the username/password combination is correct then a new AccessToken is created., (*3)

FOSRestBundle Controller

A SecurityController is also included, it is prepared to work with FOSRestBundle and creates an "AccessToken" resource to provide an REST way to login. I.E GET /api/v2/accesstoken?username=user&password=pass, (*4)

TODO

  • Document installation and configuration (security.yml, routing.yml, ... ), (*5)

  • Make AccessToken parameter name configurable, (*6)

  • Add an entity listener to remove accesstokens when user credentials are removed., (*7)

The Versions

31/03 2014

dev-master

9999999-dev

Provides an API Security Firewall based on AccessToken in Request header

  Sources   Download

GPLv2

The Requires