s-deb/slim-security

A PSR-7 compliant security middle

dev-master 2017-04-09 19:01 UTC

Requires

• php: >=5.5.0
• psr/http-message: ^1.0

Requires (Dev)

• slim/slim: ~3.0

MIT

• Sudipta Deb

• Authentication
• middleware
• input validation
• authorisation
• waf

README

A PSR7 compliant PHP middleware to meet all your security needs.

This project has just started, but to give you an idea about how this will be when you use it. See the sample configuration below.

There are two ways to congifure the middleware.

• Directly when defining the middleware for each route
• Globally via a config file (sample configureation below) and just make sure that this is invoked for every request. This will provide a way for even non middleware based projects to use this by just manually calling this on every page

Sample configuration (middleware init)

$app->addRoute('/dashboard/add*',['POST'],function(){})
        ->add(new SDeb\slim-security\SeceuiryMiddleware(
        {
            "csrf":true,
            "auth":true,
            "role":["ADMIN"],
            "params":[
                {
                    "name":"id",
                    "type":"long",
                    "required":true
                },
                {
                    "name":"action",
                    "type":"regex",
                    "regex":"ADD|DELETE|MODIFY"
                    "required":true
                },            
            ]
        }))

Sample configuration (global config):

{
    "properties":{
        "csrf-param-name":"mycsrfparam",
        "csrf-cookie-name":"mycsrfcookie",
        "auth-provider":"Debmego\common\AuthProvider",
        "...":"..."
    },
    "paths":[
        {
        "path":"/dashboard/add*",
        "method":["POST"],
        "csrf":true,
        "auth":true,
        "role":["ADMIN"],
        "params":[
            {
                "name":"id",
                "type":"long",
                "required":true
            },
            {
                "name":"action",
                "type":"regex",
                "regex":"ADD|DELETE|MODIFY"
                "required":true
            },            
        ]
        }
    ]
}