Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] AuthenticatorManager to make "authenticators" first-class security #33558

Merged
merged 30 commits into from Apr 21, 2020
Merged

[Security] AuthenticatorManager to make "authenticators" first-class security #33558

merged 30 commits into from Apr 21, 2020

Commits on Apr 20, 2020

  1. Created GuardAuthenticationManager to make Guard first-class Security

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    c321f4d View commit details
    Browse the repository at this point in the history

  2. Created HttpBasicAuthenticator and some Guard traits

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    a6890db View commit details
    Browse the repository at this point in the history

  3. Integrated GuardAuthenticationManager in the SecurityBundle

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    9b7fddd View commit details
    Browse the repository at this point in the history

  4. Added FormLogin and Anonymous authenticators

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    a172bac View commit details
    Browse the repository at this point in the history

  5. Added GuardManagerListener 

    This replaces all individual authentication listeners when guard authentication
manager is enabled.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    526f756 View commit details
    Browse the repository at this point in the history

  6. Add provider key in PreAuthenticationGuardToken 

    This is required to create the correct authenticated token in the
GuardAuthenticationManager.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    5013258 View commit details
    Browse the repository at this point in the history

  7. Create a new core AuthenticatorInterface 

    This is an iteration on the AuthenticatorInterface of the Guard, to allow more
flexibility so it can be used as a real replaced of the authentication
providers and listeners.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    5efa892 View commit details
    Browse the repository at this point in the history

  8. Implemented password migration for the new authenticators

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    fa4b3ec View commit details
    Browse the repository at this point in the history

  9. Fixes after testing in Demo application

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    4c06236 View commit details
    Browse the repository at this point in the history

  10. Mark new core authenticators as experimental

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    873b949 View commit details
    Browse the repository at this point in the history

  11. Enabled remember me for the GuardManagerListener

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    b923e4c View commit details
    Browse the repository at this point in the history

  12. Moved new authenticator to the HTTP namespace 

    This removes the introduced dependency on Guard from core. It also allows an
easier migration path, as the complete Guard subcomponent can now be deprecated
later in the 5.x life.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    b14a5e8 View commit details
    Browse the repository at this point in the history

  13. Refactor to an event based authentication approach 

    This allows more flexibility for the authentication manager (to e.g. implement
login throttling, easier remember me, etc). It is also a known design pattern
in Symfony HttpKernel.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    999ec27 View commit details
    Browse the repository at this point in the history

  14. Removed all mentions of 'guard' in the new system 

    This to remove confusion between the new system and Guard. When using the new
system, guard should not be installed. Guard did however influence the idea
behind the new system. Thus keeping the mentions of "guard" makes it confusing
to use the new system.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    7859977 View commit details
    Browse the repository at this point in the history

  15. Added support for lazy firewalls

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    1c810d5 View commit details
    Browse the repository at this point in the history

  16. Added remember me functionality

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    ddf430f View commit details
    Browse the repository at this point in the history

  17. Only load old manager if new system is disabled

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    09bed16 View commit details
    Browse the repository at this point in the history

  18. Use one AuthenticatorManager per firewall

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    44cc76f View commit details
    Browse the repository at this point in the history

  19. Merge AuthenticatorManager and AuthenticatorHandler 

    The AuthenticatorManager now performs the whole authentication process. This
allows for manual authentication without duplicating or publicly exposing parts
of the process.
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    bf1a452 View commit details
    Browse the repository at this point in the history

  20. Added automatically CSRF protected authenticators

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    60d396f View commit details
    Browse the repository at this point in the history

  21. Rename AuthenticatingListener

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    59f49b2 View commit details
    Browse the repository at this point in the history

  22. Added tests

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    6b9d78d View commit details
    Browse the repository at this point in the history

  23. Differentiate between interactive and non-interactive authenticators

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    ba3754a View commit details
    Browse the repository at this point in the history

  24. Reverted changes to the Guard component

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    f5e11e5 View commit details
    Browse the repository at this point in the history

  25. Added pre-authenticated authenticators (X.509 & REMOTE_USER)

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    95edc80 View commit details
    Browse the repository at this point in the history

  26. Use the firewall event dispatcher

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    7ef6a7a View commit details
    Browse the repository at this point in the history

  27. Added JSON login authenticator

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    0fe5083 View commit details
    Browse the repository at this point in the history

  28. Also use authentication failure/success handlers in FormLoginAuthenti… 

    …cator
    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    9ea32c4 View commit details
    Browse the repository at this point in the history

  29. Introduce Passport & Badges to extend authenticators

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    50224aa View commit details
    Browse the repository at this point in the history

  30. Rename providerKey to firewallName for more consistent naming

    @wouterj
    wouterj committed Apr 20, 2020
    Configuration menu
    Copy the full SHA
    b1e040f View commit details
    Browse the repository at this point in the history