djoos / EscapeWSSEAuthenticationBundle

Symfony bundle to implement WSSE authentication
http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html
137 stars 59 forks source link

An example of the documentation: #1

Closed fightmaster closed 12 years ago

fightmaster commented 12 years ago

$expected = base64_encode (sha1 (base64_decode ($ nonce). $ created. $ secret, true));

It makes no sense to encode in base64 time and security by following the standards WSSE

fightmaster commented 12 years ago

I hope you fix it. Do not really want to produce the same code. I'll write unit tests for this implementation, as it claims in our project.