Feature #37846

Should be able to declare more than one controllerObjectName per requestPatterns

Added by Fernando Arconada about 3 years ago. Updated about 3 years ago.

Status:New Start date:2012-06-08
Priority:Should have Due date:
Assigned To:- % Done:

0%
Category:Security
Target version:-
PHP Version: Complexity:
Has patch:No

Description

For example If you want to enable DefaultProvider in every controller but the ApiController and TokenEndpoint
requestPatterns:

  -
    controllerObjectName: '(?!My\Package\ApiController)'
  -
    controllerObjectName: '.*'
  -
    controllerObjectName: '(?!My\Package\TokenEndpoint)'

ApiController it's authenticated with other provider, for example an OAuth2AccessTokenProvider
the OAuth2 TokenEndpoind have to be authenticated following the OAuth2 draft and not the common way defined for the rest of your app

History

#1 Updated by Christian Müller about 3 years ago

  • Priority changed from Must have to Should have

Would mean that syntax to define patterns must change from:

requestPatterns:
controllerObjectName: 'TYPO3\Admin\Controller\.*'

to something more like in the firewall:

requestPatterns:
-
patternType: controllerObjectName
patternValue: 'TYPO3\Admin\Controller\.*'

#2 Updated by Christian Müller about 3 years ago

  • Project changed from TYPO3 Flow Base Distribution to TYPO3.Flow

#3 Updated by Christian Müller about 3 years ago

  • Category set to Security
  • Has patch set to No

Also available in: Atom PDF