Feature #39839

Provide abstract authentication controller

Added by Bastian Waidelich about 9 years ago. Updated almost 9 years ago.

Status:
Resolved
Priority:
Should have
Category:
Security
Start date:
2012-08-15
Due date:
% Done:

100%

Estimated time:
PHP Version:
Has patch:
No
Complexity:

Description

FLOW3 already comes with an Authentication Controller that even supports redirection to the intercepted request after successful authentication (if a WebRedirect EntryPoint was configured).

We should provide an abstract base class that developers can extend from in their own packages.
The API could be s.th. like

abstract class AbstractAuthenticationController extends \TYPO3\FLOW3\Mvc\Controller\ActionController {

public function indexAction();

final public function authenticateAction();

public function logoutAction();

abstract protected function onSuccessfulAuthentication(\TYPO3\FLOW3\Mvc\ActionRequest $interceptedRequest);

abstract protected function onErroneousAuthentication();

}


Related issues

Related to TYPO3.Flow - Bug #41048: AbstractAuthenticationController namespace does not match folder structureRejectedChristian Jul Jensen2012-09-18

Actions
#1

Updated by Bastian Waidelich about 9 years ago

  • Target version set to 2.0 beta 1
#2

Updated by Adrian Föder about 9 years ago

like the idea, but we should think carefully about what methods to make final and abstract and on what methods to provide existing code which can facultatively be overridden.

#3

Updated by Bastian Waidelich about 9 years ago

Adrian Föder wrote:

like the idea, but we should think carefully about what methods to make final and abstract
and on what methods to provide existing code which can facultatively be overridden.

You're right. We did this now without final methods (see review)

#4

Updated by Karsten Dambekalns almost 9 years ago

  • Status changed from New to Resolved
  • Assignee set to Andreas Förthner
  • % Done changed from 0 to 100

Also available in: Atom PDF