Feature #39839

Provide abstract authentication controller

Added by Bastian Waidelich almost 3 years ago. Updated almost 3 years ago.

Status:Resolved Start date:2012-08-15
Priority:Should have Due date:
Assigned To:Andreas Förthner % Done:

100%

Category:Security
Target version:TYPO3 Flow Base Distribution - 2.0 beta 1
PHP Version: Complexity:
Has patch:No

Description

FLOW3 already comes with an Authentication Controller that even supports redirection to the intercepted request after successful authentication (if a WebRedirect EntryPoint was configured).

We should provide an abstract base class that developers can extend from in their own packages.
The API could be s.th. like

 1abstract class AbstractAuthenticationController extends \TYPO3\FLOW3\Mvc\Controller\ActionController {
 2
 3public function indexAction();
 4
 5final public function authenticateAction();
 6
 7public function logoutAction();
 8
 9abstract protected function onSuccessfulAuthentication(\TYPO3\FLOW3\Mvc\ActionRequest $interceptedRequest);
10
11abstract protected function onErroneousAuthentication();
12
13}


Related issues

related to TYPO3.Flow - Bug #41048: AbstractAuthenticationController namespace does not match... Rejected 2012-09-18

Associated revisions

Revision 3eb7b5c0
Added by Andreas Förthner almost 3 years ago

[FEATURE] Provide a general abstract authentication controller

This can be used to be inherited from in a custom package,
to enable developers to quickly implement their own
authentication controller.

Related: #39839
Change-Id: If0f694759008192eaceaeb55f17eb9dc10d2fbed
Releases: 1.2

History

#1 Updated by Bastian Waidelich almost 3 years ago

  • Target version set to 2.0 beta 1

#2 Updated by Adrian Föder almost 3 years ago

like the idea, but we should think carefully about what methods to make final and abstract and on what methods to provide existing code which can facultatively be overridden.

#3 Updated by Bastian Waidelich almost 3 years ago

Adrian Föder wrote:

like the idea, but we should think carefully about what methods to make final and abstract
and on what methods to provide existing code which can facultatively be overridden.

You're right. We did this now without final methods (see review)

#4 Updated by Karsten Dambekalns almost 3 years ago

  • Status changed from New to Resolved
  • Assigned To set to Andreas Förthner
  • % Done changed from 0 to 100

Also available in: Atom PDF