如何解决具有相同模式的多个防火墙
我目前有以下配置, 当从外部消费者发送令牌时,端点 /api 工作正常。
但我现在想重用这个模式 ^/api,在我使用会话的应用程序中使用 ajax。我如何配置防火墙以使其适用于无状态或会话?
security:
encoders:
FOS\UserBundle\Model\UserInterface: bcrypt
App\Entity\User\User:
algorithm: bcrypt
role_hierarchy:
ROLE_ADMIN: [ROLE_USER,ROLE_ALLOWED_TO_SWITCH]
ROLE_SUPER_ADMIN: ROLE_ADMIN
providers:
fos_userbundle:
id: fos_user.user_provider.username_email
app_user_provider:
entity:
class: App\Entity\User\User
property: username
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
logout:
pattern: ^/api/logout
stateless: true
anonymous: true
logout:
path: app_logout
success_handler: "app.webservice_logout_success_listener"
api:
pattern: ^/api
stateless: true
anonymous: true
provider: app_user_provider
json_login:
check_path: /api/login_check
username_path: username
password_path: password
success_handler: lexik_jwt_authentication.handler.authentication_success
failure_handler: lexik_jwt_authentication.handler.authentication_failure
guard:
authenticators:
- lexik_jwt_authentication.jwt_token_authenticator
admin:
context: user
switch_user: true
pattern: ^/
anonymous: ~
provider: fos_userbundle
form_login:
login_path: admin_login
check_path: admin_login
default_target_path: easyadmin
failure_path: admin_login
logout:
path: /logout
target: /login
解决方法
我找到了解决方案,抱歉花时间回复。 解决方案我不知道它是否是最好的方法,但我想知道关于其他可能实现的意见。
一方面,我启用了 Lexik,以获取 cookie 的令牌。
# config/packages/lexik_jwt_authentication.yaml
lexik_jwt_authentication:
# some_config:
token_extractors:
# check token in a cookie
cookie:
enabled: true
name: Bearer
另一方面,当用户通过会话进行身份验证时,我会覆盖该函数,设置 cookie 并使用 Lexik 生成的令牌 programmatically
<?php
namespace App\Security;
use Lexik\Bundle\JWTAuthenticationBundle\Services\JWTTokenManagerInterface;
use Symfony\Component\HttpFoundation\Cookie;
use Symfony\Component\Security\Http\Authentication\DefaultAuthenticationSuccessHandler as BaseDefaultAuthenticationSuccessHandler;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Http\HttpUtils;
class DefaultAuthenticationSuccessHandler extends BaseDefaultAuthenticationSuccessHandler
{
private $JWTManager;
public function __construct(
JWTTokenManagerInterface $JWTManager,HttpUtils $httpUtils,array $options = []
)
{
parent::__construct($httpUtils,$options);
$this->JWTManager = $JWTManager;
}
public function onAuthenticationSuccess(Request $request,TokenInterface $token)
{
/** @var Response $response */
$response = parent::onAuthenticationSuccess($request,$token);
$response->headers->setCookie(Cookie::create('Bearer',$this->JWTManager->create($token->getUser())));
return $response;
}
}
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。