symfony2 rest api conception. Application authentication/ user application authentication

Question

I'm working on transforming my classic website to rest API in Symfony 2 world.

First of all I'm doing that because I want to a mobile version of my project (maybe phone gap) but with angularjs. my question actually is what is the difference between my angular application authentication to access my api resources and the authentication of the users of the application.

I'm working with Symfony2 standard edition, Fosrestbundle, FosOauthbundle and Fosuserbundle for user management and JmsSerializerbundle and nelmio.

What you're asking specifically? Have you encountered any issue? — Alessandro Lai
– Alessandro Lai, Commented Apr 28, 2015 at 9:53

MichaelHindley · Accepted Answer · 2015-04-28 11:01:59Z

1

The key difference is that in a REST context, you have no Session for the user. Every new REST Request should know nothing about the last Request made.

You will typically to authenticate using request headers, typically the WWW-Authenticate header, or by using your own custom headers to support things like several versions, which is a whole different topic.

In general, it doesn't really matter how you chose to authenticate users once the Request hits, you just need to recognize that authentication has to be setup in such a way that doesn't utilize a Session.

answered Apr 28, 2015 at 11:01

MichaelHindley

4933 silver badges7 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

danH91 Over a year ago

Thanks a lot for your reply it help to have a better general understanding of the problem.

Collectives™ on Stack Overflow

symfony2 rest api conception. Application authentication/ user application authentication

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related