Symfony Basic API Http Authentication

Question

Can someone point me in the right direction in regards to making an api use basic http authentication?

I am creating a restful api with symfony but would like to require users to be logged in to get certain data. I would also like many of these methods be dependent on the the username in the authentication process in order to get some of the data (using the username from the credentials to get all of a users friends)

Thanks!

Artefacto · Accepted Answer · 2010-06-02 17:30:05Z

1

Something like this:

function send401() {
    $realm = "Credentials for site xxx";
    header("HTTP/1.0 401 Authorization Required")
    header('WWW-Authenticate: Basic realm="'.$realm.'"');
    die();
}


if (!array_key_exists('PHP_AUTH_USER',$_SERVER) ||
        !array_key_exists('PHP_AUTH_PW',$_SERVER)) {
    send401();
}
else {
    $res = authenticate_user($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']);
    if (!$res)
        send401();
}

The username is stored in $_SERVER['PHP_AUTH_USER'].

edited Jun 2, 2010 at 17:30

answered Jun 2, 2010 at 17:24

Artefacto

98.1k17 gold badges207 silver badges230 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Adam Monsen Over a year ago

This is also possible with Symfony2 configuration. Search for http_basic and stateless on symfony.com/doc/current/book/security.html . I'm not sure when this configuration-based approach was made possible with Symfony2.

Collectives™ on Stack Overflow

Symfony Basic API Http Authentication

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related