frieser/wsse-authentication-bundle

This package is abandoned and no longer maintained. No replacement package was suggested.

Symfony2 bundle to implement WSSE authentication

2.3.3 2013-10-25 08:36 UTC

Requires

• php: >=5.3.2

Requires (Dev)

• symfony/finder: 2.3.*@dev
• symfony/framework-bundle: 2.3.*
• symfony/security-bundle: 2.3.*

MIT

• David Joos
• Community contributors
• Héctor Molano Macias

• Authentication
• bundle
• wsse

README

The EscapeWSSEAuthentication bundle is a simple and easy way to implement WSSE authentication in Symfony2 applications

Installation

composer.json

"require": {
    ...
    "escapestudios/wsse-authentication-bundle": "2.3.x-dev",
    ...
}

app/AppKernel.php

public function registerBundles()
{
    return array(
        //...
        new Escape\WSSEAuthenticationBundle\EscapeWSSEAuthenticationBundle(),
        //...
    );
    ...

Commands

Delete expired nonces via the escape:wsseauthentication:nonces:delete command that ships with this bundle; it takes nonceDir and lifetime as (required) parameters.

php app/console --env=dev escape:wsseauthentication:nonces:delete /path/to/security/nonces 300

Usage example

app/config/security.yml

firewalls:
    wsse_secured:
        pattern:   ^/api/.*
        wsse:
            nonce_dir: null #location where nonces will be saved; use null to skip nonce-validation
            lifetime: 300 #lifetime of nonce
            realm: "Secured API" #identifies the set of resources to which the authentication information will apply (WWW-Authenticate)
            profile: "UsernameToken" #WSSE profile (WWW-Authenticate)

Advanced configuration

Specify custom digest algorithm

app/config/security.yml

firewalls:
    wsse_secured:
        ...
        wsse:
            ...
            encoder: #digest algorithm
                algorithm: sha1
                encodeHashAsBase64: true
                iterations: 1

Specify custom authentication class(es)

app/config/config.yml

# Escape WSSE authentication configuration
escape_wsse_authentication:
    authentication_provider_class: Escape\WSSEAuthenticationBundle\Security\Core\Authentication\Provider\Provider
    authentication_listener_class: Escape\WSSEAuthenticationBundle\Security\Http\Firewall\Listener
    authentication_entry_point_class: Escape\WSSEAuthenticationBundle\Security\Http\EntryPoint\EntryPoint
    authentication_encoder_class: Symfony\Component\Security\Core\Encoder\MessageDigestPasswordEncoder