Here lies the source code for the test task, the very full copy of the test task is not placed here due to security reasons.
By now the running application can be accessed on http://95.211.120.226:2020/
The application contains two authenticators: ApiTokenAuthenticator and AppCustomAuthenticator
By rules declared in
The first protects the API endpoint /api/users (The link button to the address is added to the app menu in order to show it throws 401 Error without a valid token present in headers)
The second stands for user session authentication.
api:
pattern: ^/api
stateless: true
custom_authenticator:
- App\Security\ApiTokenAuthenticator
main:
lazy: true
provider: app_user_provider
custom_authenticator:
- App\Security\AppCustomAuthenticator
Initially, after passing custom user authentication, application triggers user-defined UserAuthenticatedEvent, which is then sent for processing to the UserSubscriber event subscrber where the api token is assigned to the user.
After that the user is routed to the home route: "/" run by MainController.
Then, in Controller application makes an HttpClient request ( wrapped as a service) with an issued api token.
(It was asked in the task to perform a request to the API, it could be done via client-side request, but in that case the api token could become visible for the user, so the server side request was chosen for implementation)
The application should be resilient to large amounts of traffic at very specific hours of the day. This should be taken into account when writing the configuration files.
Due to that reason the users' list is stored in initially available (no need to add anything to config here) FileSystem cache. (Symfony's cache is resilient to cache stampede since v.4).
The cache is updated once in 5 seconds on demand.
Assuming the application is run behind a load-balancer, trusted proxies are added as network submasks for any private network address
framework:
# any local addresses okay for proxying from load balancer
trusted_proxies: '192.168.0.0/16,172.16.0.0/16,10.0.0.0/8'
trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix']
trusted_headers: ['forwarded']