Symfony2+FOSOAuthServerBundle: Browser-less initial authentication

Question

We have a webapp over Symfony2.1, and we are trying to securize some REST webservices by using OAuth. These webservices are to be consumed by an Android app.

We are trying FOSOAuthServerBundle, and seems OK for authenticating the use of webservices from other websites, as the auth step is fully web-based.

But what we need is the next workflow:

The user enters his username and password in the app
The app then uses this information for automatically retrieving a valid Oauth token.
The app uses this Oauth token as a parameter while consuming the OAuth-secured REST webservices.

Is this possible? Is FOSOAuthServerBundle the Bundle we need? How can we retrieve a valid OAuth-token without user interaction, only with username+password as parameters of the auth?

Thanks a lot.

Community · Accepted Answer · 2021-10-07 05:54:43Z

5

Yes, FOSOAuthServerBundle can do that for you. Just use Resource Owner Password Credentials Grant according to OAuth 2 spec.

Here is the instruction how to add client (app) with different grant types http://blog.logicexception.com/2012/04/securing-syfmony2-rest-service-wiith.html

List of available grant types: https://github.com/FriendsOfSymfony/oauth2-php/blob/b0e57e17c84175a51af01cef7bbb2961261c84ad/lib/OAuth2.php#L230

edited Oct 7, 2021 at 5:54

CommunityBot

11 silver badge

answered Dec 9, 2012 at 9:51

Alexey Morozov

1,28910 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

AlexHalkin Over a year ago

Thanks for the reference to great step-by-step tutorial.

Collectives™ on Stack Overflow

Symfony2+FOSOAuthServerBundle: Browser-less initial authentication

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related