Feature #37846

Should be able to declare more than one controllerObjectName per requestPatterns

Added by Fernando Arconada over 8 years ago. Updated over 8 years ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
Security
Target version:
-
Start date:
2012-06-08
Due date:
% Done:

0%

Estimated time:
PHP Version:
Has patch:
No
Complexity:

Description

For example If you want to enable DefaultProvider in every controller but the ApiController and TokenEndpoint
requestPatterns:

  -
    controllerObjectName: '(?!My\Package\ApiController)'
  -
    controllerObjectName: '.*'
  -
    controllerObjectName: '(?!My\Package\TokenEndpoint)'

ApiController it's authenticated with other provider, for example an OAuth2AccessTokenProvider
the OAuth2 TokenEndpoind have to be authenticated following the OAuth2 draft and not the common way defined for the rest of your app

#1

Updated by Christian Müller over 8 years ago

  • Priority changed from Must have to Should have

Would mean that syntax to define patterns must change from:

requestPatterns:
controllerObjectName: 'TYPO3\Admin\Controller\.*'

to something more like in the firewall:

requestPatterns:
-
patternType: controllerObjectName
patternValue: 'TYPO3\Admin\Controller\.*'

#2

Updated by Christian Müller over 8 years ago

  • Project changed from TYPO3 Flow Base Distribution to TYPO3.Flow
#3

Updated by Christian Müller over 8 years ago

  • Category set to Security
  • Has patch set to No

Also available in: Atom PDF