search

djoos / EscapeWSSEAuthenticationBundle

Symfony bundle to implement WSSE authentication
http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html
137 stars 59 forks source link

[enhancement] Task for purging nonces #19

Open giorrrgio opened 11 years ago

giorrrgio commented 11 years ago

How about adding a command for purging expired nonces? It would be useful to put it in a cronjob to mantain the nonce folder clean.

djoos commented 11 years ago

Hi Giorgio,

thanks for getting in touch - I think this is a great feature request!

Kind regards, David

djoos commented 11 years ago

Hi Giorgio,

would you be able to give the dev_nonces-branch a spin?

php app/console escape:wsseauthentication:nonces:delete nonceDir lifetime

Thanks in advance for your feedback!

Kind regards, David

djoos commented 11 years ago

Hi @giorrrgio,

the dev_nonces-branch has now been merged into master (see #bcdc05d8db41e6206af4c2d0431baae936e0d34d) I'll close this issue, but don't hesitate to get in touch with your feedback!

Kind regards, David

djoos commented 10 years ago

Hi @giorrrgio,

I'm going to reference in #25 (nonce storage abstraction) here, as this is going to have an influence on what we've discussed previously in this thread.

Kind regards, David

djoos commented 10 years ago

The nonce storage has been abstracted, but there doesn't seem to be a way to only delete expired cache ids. So, for now the command will delete all cache ids.

Let's keep an eye on Doctrine/cache.

Kind regards, David

scr4tchy commented 10 years ago

How about removing cache of nonce ? I've a large website and it generates thousands of nonces files each hour ... Thanks. So it takes hours to cache:clear so I can't update my website properly anymore !

djoos commented 10 years ago

Hi @Mentalow,

"How about removing cache of nonce" would you mind elaborating this a bit more?

Thanks in advance for your feedback!

Kind regards, David

djoos commented 10 years ago

Also have a look at #44 when tackling this issue.