symfony2 API authentication and routing

Question

I followed the instructions for creating a custom authentication provider: http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html

app/config/security:

firewalls:
    wsse_protection:
        pattern: ^/api/.*
        wsse: true
    main:
        pattern: ^/
        form_login:
            provider: fos_userbundle
        logout:       true
        anonymous:    true

Now I have some Actions in the Controllers with routes. e.g:

ExampleController with listAction

routing:

example_list:
    pattern: /example/list
    defaults: { ... }

Do I have to copy all the routes to example_api_list? Because api/example/list didnt work (no route found for /api/example/list). I thought the pattern from the firewall is a prefix for all defined routes.

Problematic · Accepted Answer · 2011-09-23 15:33:54Z

1

The firewall isn't a prefix, it's a regular expression that matches against incoming routes. In this case, anything starting with /api will be matched by your wsse_protection firewall, and everything that falls through will be matched by your main firewall.

To create routes under /api/*, you'll have to define the routing separately.

answered Sep 23, 2011 at 15:33

Problematic

17.7k10 gold badges75 silver badges86 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Uwe Over a year ago

ok. thanks. In the meantime I got some problems in securing the controller methods. adding a @Secure(roles="ROLE_ADMIN") annotation will leading to a replay attac. Do you know how to solve that or what is the reason for?

Uwe Over a year ago

The same with $this->get('security.context')->isGranted('ROLE_ADMIN') or access_control to ROLE_ADMIN in security.yml.

Collectives™ on Stack Overflow

symfony2 API authentication and routing

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related