6.3

What's Changed

• Fix signature generation with rawurldecode by @steven-fulll in #24

New Contributors

• @steven-fulll made their first contribution in #24

Full Changelog: 6.2.4...6.3

6.2.4

What's Changed

• [Fix] Fix caused by Symfony 7.3 upgrade by @omarghamraoui-fulll in #22

New Contributors

• @omarghamraoui-fulll made their first contribution in #22

Full Changelog: 6.2.3...6.2.4

6.2.3

What's Changed

• Fix listener to allow request that don't need cors by @fberthereau in #21

Full Changelog: 6.2.2...6.2.3

6.2.2

Fix CorsListener declaration

Full Changelog: 6.2.1...6.2.2

6.2.1

What's Changed

• Fix namespace of CorsSecurityListener by @fberthereau in #20

Full Changelog: 6.2.0...6.2.1

6.2.0 - Add CORS listener

What's Changed

• feat enhancement: Migrate CI from Travis to Github Action (fulll/gamme-client#843) by @Samffy in #18
• Add CORS listener by @fberthereau in #19

Full Changelog: 6.1.0...6.2.0

6.1.0 - Allow symfony >= 5.4

What's Changed

• Allow symfony >= 5.4 by @Azoog in #17

Full Changelog: 6.0.1...6.1.0

6.0.1 - Fix signature TTL type hint

Fix signature TTL type hint

Full Changelog: 6.0...6.0.1

6.0 - Symfony security authenticator compatibility

⚠️ This version is only available from Symfony 5.4 and PHP 8.0

If you are using an older version, the default branch is the v5 branch for backward compatibility.

Changes in security.yml:

security:
+    # only for sf5
+    enable_authenticator_manager: true

+    providers:
+      # In this new version a provider must be defined to use a custom authenticator.
+      request_signature:
+        id: fulll.request_signature.provider

    firewalls:
        api:
            pattern: ^/api/.*
+            # must be declared explicitly if there are several providers
+            provider: request_signature
            request_signature:
                algorithm: SHA1
                # you can easily ignore this when use functional tests by example
                ignore:    %request_signature.ignore%
                # secret of symfony application or an other one
                secret:    %secret%
                # http://.............?_signature=....
                parameter: _signature
                # Do you want to add a lifetime criteria ? By this way the signature will be transitory
                replay_protection:
                    enabled:   true
                    lifetime:  600
                    parameter: _signature_ttl

5.4.0 - Handle TTL for signature creation

What's Changed

• feat: handle ttl for signature creation by @Kevin-koko in #14

Full Changelog: 5.3.2...5.4.0