spryker/authorization

Authorization module

1.5.0 2023-11-17 09:59 UTC

Requires

• php: >=8.1
• spryker/authorization-extension: ^1.2.0
• spryker/kernel: ^3.33.0
• spryker/transfer: ^3.25.0

Requires (Dev)

• spryker/code-sniffer: *
• spryker/testify: *

Suggests

• spryker/glue-application: If you want to use the plugins.
• spryker/symfony: If you want to use the plugins.

proprietary

README

Generic authorization module that can be used across different layers.

It provides the possibility to implement different authorization strategies using the Spryker\Shared\AuthorizationExtension\Dependency\Plugin\AuthorizationStrategyPluginInterface.

The general idea is that strategies have a name and when an authorization check is requested a strategy can be requested by name. This allows it to share a single strategy coming from one module between different modules and also makes it easy to change strategies.

An authorization request is composed in this way:

• AuthorizationRequestTransfer
  • has one AuthorizationIdentityTransfer
  • has one AuthorizationEntityTransfer

The identity describes accessor and the entity the object the authoriziation is checked against.

An authorization check will return an AuthorizationResponseTransfer.

Installation

composer require spryker/authorization

Documentation

Spryker Documentation