Project Bootstrap for an angularJS + Symfony webservices project.
This project is a template application with secured communication via a RestFul API between the client part with AngularJS and the server part with Symfony2.
Clone the project :
git clone [email protected]:FlyersWeb/angular-symfony.git angular-symfony
Update packages :
cd angular-symfony
composer.phar install
Edit database credentials :
vim app/config/parameters.yml
Update schemas (FOSUserBundle) :
php app/console doctrine:schema:create
Create and activate user :
php app/console fos:user:create
php app/console fos:user:activate
Link project to your webserver and access it :
ln -snf ./ /var/www/html/angular-symfony
firefox http://localhost/angular-symfony/ &
The Authentication system is based on the custom Authentication Provider of the Symfony2 Cookbook : http://symfony.com/doc/2.1/cookbook/security/custom_authentication_provider.html
The following chapter demonstrates how to create a custom authentication provider for WSSE authentication. The security protocol for WSSE provides several security benefits:
- Username / Password encryption
- Safe guarding against replay attacks
- No web server configuration required
WSSE is very useful for the securing of web services, may they be SOAP or REST.
I used the exact same authentication system with a little change in moment of generating the digest, we use the hexadecimal value of the hashed seed in lieu of the binary value.
On the client side, I've inspired my code from Nils Blum-Oeste article explaining how to send an authorization token for every request. To do this you have to register a wrapper for every resource actions that execute a specific code before doing the action. For more information you can check http://nils-blum-oeste.net/angularjs-send-auth-token-with-every--request/.
The differences there is that I send the token, username and user digest in the HTTP Header X-WSSE.
You can use this template and adapt it to your needs.
@FlyersWeb