Le 07/06/2011 20:52, Marco Oliveira a écrit :
Hi everyone,

I'm currently implementing an authentication mechanism that relies on
a REST webservice. All this webservice allows me to do is to make a
call like http://host.com/login/username/password, and the webservice
either returns a success or failure message. How do you suggest I do
this? After looking at the documentation, I found this
http://symfony.com/doc/current/cookbook ... vider.html, unfortunately
it's empty. I suppose I should create an implementation of the
UserProviderInterface, set it as a service with id
"security.user.provider.concrete.my_custom_provider", and use
"my_custom_provider" as the provider id. Unfortunately, after looking
a bit further, I found that the UserInterface, which should be
returned by my custom provider, has a getPassword() method. This is
impossible for me to implement, as I don't have access to this
password. Maybe I'm looking at this the wrong way, feel free to throw
suggestions on the table. How do you suggest I address this?

Thanks in advance.

Then return null as encoded password and register a custom encoder for this class which does some custom logic (or nothing) to check the password.

--
Christophe | Stof

--
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to