Skip to content

Latest commit

 

History

History
69 lines (47 loc) · 1.67 KB

README.md

File metadata and controls

69 lines (47 loc) · 1.67 KB
Raw

sfWSSEAuthenticationPlugin

This plugin aims to implement WSSE authentication for Symfony 1. It uses sfGuardUser to validate authentication username and password. In other words: you must create a sfGuardUser and use its username and encrypted password to generate WSSE credentials.

Installation

  • Go to the plugins root (usually: /plugins)

  • Install the plugin:

git clone https://github.com/stadline/sfWSSEAuthenticationPlugin.git sfWSSEAuthenticationPlugin
  • Edit ProjectConfiguration.class.php to activate the plugin:
$this->enablePlugins(array(
    ...
    'sfWSSEAuthenticationPlugin',
));
  • Clear the cache:
./symfony cc

Configuration

To activate the plugin, you need to change the filter responsible of the security.

  • Go to /apps/<yourApp>/config and edit filters.yml

  • Modify the class under security filter:

security:
  class: sfWsseSecurityFilter
  • Additionally, you might turn of session storage to allow stateless operations. To do that you need to change the storage class in factories.yml.
all:
  storage:
    class: sfNoStorage
  • You can also turn off the filter using environment parameters. To do that you need to edit the app.yml file.
test:
  security:
    enabled: false

Helper task

You can use the wsse:generate-credentials task to generate a valid WSSE UsernameToken and get the user encrypted password