API Authentication
UlrichHP opened this issue · 1 comments
UlrichHP commented
Installation of Oauth or JWT to authenticate users.
Possibility to view a list of registered users connected to a client, to see one in particular, and to be abble to add or delete users.
Time Estimate : 3 days.
UlrichHP commented
Oauth authentication is now implemented and working.
- Installed and configured FOSOauthServerBundle.
- Created two controllers: SecurityController and UserController.
- Modified controllers route to now use /api/ as a prefix for the API (see BileMo_doc.md), easier to configure access_control in security.yml.
- Created 5 entities and their repositories : AccessToken, AuthCode, Client, RefreshToken and User.
- Created UserProvider in the Security folder.
- Created CreateClientCommand in the Command folder to generate a command line to register a new client.
- /register allows users to register.
- /users and /users/{id} allows you to see users.
- /users/me allows the user to see his informations.
- You can delete users with DELETE /users/{id}.
- Chose to authenticate using Resource Owner Password Credentials Grant.
- Modified config.yml, routing.yml, security.yml and services.yml.
- Updated the Documentation, the UML diagrams and the README.
This API is now mostly features complete. The only thing left to do is to add roles to users so only an admin can delete another user. For now, any user can do it (issue #5).
Then, i will verify that everything is working correctly and that the diagrams, the documentation and the README are correct (issue #4).
Done in : 5 days.