具有相同模式的多个防火墙

Question

我目前有以下配置:当从外部消费者发送令牌时，端点/api工作正常。

但是我现在想重用这个模式^/api，在我使用会话的应用程序中使用ajax。如何将防火墙配置为无状态或会话工作?

security:
encoders:
FOSUserBundleModelUserInterface: bcrypt
AppEntityUserUser:
algorithm: bcrypt
role_hierarchy:
ROLE_ADMIN: [ROLE_USER, ROLE_ALLOWED_TO_SWITCH]
ROLE_SUPER_ADMIN: ROLE_ADMIN
providers:
fos_userbundle:
id: fos_user.user_provider.username_email
app_user_provider:
entity:
class: AppEntityUserUser
property: username
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
logout:
pattern: ^/api/logout
stateless: true
anonymous: true
logout:
path:  app_logout
success_handler: "app.webservice_logout_success_listener"
api:
pattern: ^/api
stateless: true
anonymous: true
provider: app_user_provider
json_login:
check_path: /api/login_check
username_path: username
password_path: password
success_handler: lexik_jwt_authentication.handler.authentication_success
failure_handler: lexik_jwt_authentication.handler.authentication_failure
guard:
authenticators:
- lexik_jwt_authentication.jwt_token_authenticator
admin:
context: user
switch_user: true
pattern:  ^/
anonymous: ~
provider: fos_userbundle
form_login:
login_path: admin_login
check_path: admin_login
default_target_path: easyadmin
failure_path: admin_login
logout:
path:   /logout
target: /login

Answer 1

我找到了一个解决方案，抱歉占用时间回复。我不知道这是不是最好的解决方案，但我想知道关于其他可能实现的意见。

一方面，我启用了lexk来获取cookie的令牌。

# config/packages/lexik_jwt_authentication.yaml
lexik_jwt_authentication:
# some_config:
token_extractors:
# check token in a cookie
cookie:
enabled: true
name:    Bearer

另一方面，当用户通过会话进行身份验证时，我重写该函数，设置cookie并使用lexk

以编程方式生成的令牌

<?php
namespace AppSecurity;
use LexikBundleJWTAuthenticationBundleServicesJWTTokenManagerInterface;
use SymfonyComponentHttpFoundationCookie;
use SymfonyComponentSecurityHttpAuthenticationDefaultAuthenticationSuccessHandler as BaseDefaultAuthenticationSuccessHandler;
use SymfonyComponentHttpFoundationRequest;
use SymfonyComponentHttpFoundationResponse;
use SymfonyComponentSecurityCoreAuthenticationTokenTokenInterface;
use SymfonyComponentSecurityHttpHttpUtils;
class DefaultAuthenticationSuccessHandler extends BaseDefaultAuthenticationSuccessHandler
{
private $JWTManager;
public function __construct(
JWTTokenManagerInterface $JWTManager,
HttpUtils $httpUtils,
array $options = []
)
{
parent::__construct($httpUtils, $options);
$this->JWTManager = $JWTManager;
}
public function onAuthenticationSuccess(Request $request, TokenInterface $token)
{
/** @var Response $response */
$response = parent::onAuthenticationSuccess($request, $token);
$response->headers->setCookie(Cookie::create('Bearer', $this->JWTManager->create($token->getUser())));
return $response;
}
}