|
4 | 4 | How to Create a custom Authentication Provider
|
5 | 5 | ==============================================
|
6 | 6 |
|
| 7 | +.. note:: |
| 8 | + |
| 9 | + If you want to authenticate users via OAuth using a third-party service |
| 10 | + such as Google, Facebook or Twitter, there is no need to create your own |
| 11 | + authentication provider. In those cases, use the `HWIOAuthBundle`_ community |
| 12 | + bundle. |
| 13 | + |
7 | 14 | If you have read the chapter on :doc:`/book/security`, you understand the
|
8 | 15 | distinction Symfony makes between authentication and authorization in the
|
9 | 16 | implementation of security. This chapter discusses the core classes involved
|
@@ -280,7 +287,7 @@ the ``PasswordDigest`` header value matches with the user's password.
|
280 | 287 |
|
281 | 288 | .. note::
|
282 | 289 |
|
283 |
| - The comparsion of the expected and the provided digests uses a constant |
| 290 | + The comparison of the expected and the provided digests uses a constant |
284 | 291 | time comparison provided by the
|
285 | 292 | :method:`Symfony\\Component\\Security\\Core\\Util\\StringUtils::equals`
|
286 | 293 | method of the ``StringUtils`` class. It is used to mitigate possible
|
@@ -615,6 +622,7 @@ set to any desirable value per firewall.
|
615 | 622 | The rest is up to you! Any relevant configuration items can be defined
|
616 | 623 | in the factory and consumed or passed to the other classes in the container.
|
617 | 624 |
|
| 625 | +.. _`HWIOAuthBundle`: https://github.com/hwi/HWIOAuthBundle |
618 | 626 | .. _`WSSE`: http://www.xml.com/pub/a/2003/12/17/dive.html
|
619 | 627 | .. _`nonce`: http://en.wikipedia.org/wiki/Cryptographic_nonce
|
620 | 628 | .. _`timing attacks`: http://en.wikipedia.org/wiki/Timing_attack
|
0 commit comments