djoos / EscapeWSSEAuthenticationBundle

Symfony bundle to implement WSSE authentication
http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html
137 stars 59 forks source link

Future check #30

Closed broncha closed 10 years ago

broncha commented 10 years ago

You cannot force the clients to be running exactly the same time as the server. I personally had this issue, where the server was not even tolerating a difference in seconds. Moving the future check logic to a protected method so other implementations can apply their own logic to check for future tokens.

djoos commented 10 years ago

Thanks for the PR! Perhaps a mash of this one and #28 (configurable option) is the best way forward... I'll try to free up some time in the next few days/week to have a look at bost "future token"-related PRs.

Kind regards, David

djoos commented 10 years ago

Thanks again for your contribution!

Kind regards, David