Comments (7)
One interesting note: we currently only define two types of authentication, "http" and "oauth2". "http" encompasses both basic and digest. We may need to change this to allow defining each of basic, digest or oauth2.
Ping @ezimuel — thoughts?
from zf-mvc-auth.
I'm guessing OAuth1 is not in the cards, on the server side?
from zf-mvc-auth.
@EMCP there is not a zf-oauth1 library and I'll go on to opinion we shouldn't promote such old technology in zfcampus.
from zf-mvc-auth.
I feel such old technology has advantages over OAuth2, but I hear your opinion.
from zf-mvc-auth.
#59 was created to address this.
from zf-mvc-auth.
@EMCP There are good and bad things about OAuth v1.x; the request signing was great, but it was also incredibly brittle for implementors. All that said: because authentication is an event, you can implement it and drop it in to listen at priority > 1; so long as your listener returns one of either the GuestIdentity or AuthenticatedIdentity, the default options will be omitted. However, it means you cannot configure it in the admin UI, nor, as the state of #59 currently stands, opt-in to per-API authentication types. I'll take that latter into consideration as we test the patch, as I think it could be useful to specify custom types, even if we don't handle them in the default listener.
from zf-mvc-auth.
Addressed in #59 — including custom types and adapters, @EMCP!
from zf-mvc-auth.
Related Issues (20)
- Clients are not challenged when they are expected to be HOT 5
- Incorrect reponses when using the OAuth authentication adapter HOT 3
- Wrong HTTP status code for authentication challenge HOT 2
- Update zendframework/zend-servicemanager 2.7.3 breaking Apigility application HOT 1
- OAuth2ServerFactory using deprecated MongoClient HOT 4
- Docs claim wrong event priorities HOT 1
- MvcRouteListener not initialized in release 1.4.0 HOT 3
- Urls with identifier of "0" are being treated as collection requsts
- Problem in return getIdentity( ) HOT 3
- all request pass whitout code authorization HOT 2
- Exception thrown when using Admin HOT 1
- Question: why we need to check auth data if resource is public? HOT 2
- AclAuthorizationFactory cause Fatal error since 1.4.3 HOT 1
- Apigility Resource Id already exists in ACL. HOT 1
- Two same queries. Fix to one
- Class 'Zend\Permissions\Rbac\AbstractRole' not found HOT 2
- Provide PHP 7.2 support HOT 1
- (ignore) HOT 1
- id_token is not returned when using the `use_openid_connect` option
- Zf mvc auth can not identifier request type. Collection or Entity HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zf-mvc-auth.