Feature #39839

Provide abstract authentication controller

Added by Bastian Waidelich 9 months ago. Updated 8 months ago.

Status:Resolved Start date:2012-08-15
Priority:Should have Due date:
Assignee:Andreas Förthner % Done:

100%

Category:Security
Target version:TYPO3 Flow Base Distribution - 2.0 beta 1
PHP Version: Complexity:
Has patch:No
Votes: 1 (View)

Description

FLOW3 already comes with an Authentication Controller that even supports redirection to the intercepted request after successful authentication (if a WebRedirect EntryPoint was configured).

We should provide an abstract base class that developers can extend from in their own packages.
The API could be s.th. like

 1 abstract class AbstractAuthenticationController extends \TYPO3\FLOW3\Mvc\Controller\ActionController {
 2 
 3 public function indexAction();
 4 
 5 final public function authenticateAction();
 6 
 7 public function logoutAction();
 8 
 9 abstract protected function onSuccessfulAuthentication(\TYPO3\FLOW3\Mvc\ActionRequest $interceptedRequest);
10 
11 abstract protected function onErroneousAuthentication();
12 
13 }


Related issues

related to TYPO3.Flow - Bug #41048: AbstractAuthenticationController namespace does not match... Rejected 2012-09-18

Associated revisions

Revision 3eb7b5c0
Added by Andreas Förthner 8 months ago

[FEATURE] Provide a general abstract authentication controller

This can be used to be inherited from in a custom package,
to enable developers to quickly implement their own
authentication controller.

Related: #39839
Change-Id: If0f694759008192eaceaeb55f17eb9dc10d2fbed
Releases: 1.2

History

Updated by Bastian Waidelich 9 months ago

  • Target version set to 2.0 beta 1

Updated by Adrian Föder 9 months ago

like the idea, but we should think carefully about what methods to make final and abstract and on what methods to provide existing code which can facultatively be overridden.

Updated by Bastian Waidelich 9 months ago

Adrian Föder wrote:

like the idea, but we should think carefully about what methods to make final and abstract and on what methods to provide existing code which can facultatively be overridden.

You're right. We did this now without final methods (see review)

Updated by Karsten Dambekalns 8 months ago

  • Status changed from New to Resolved
  • Assignee set to Andreas Förthner
  • % Done changed from 0 to 100

Also available in: Atom PDF