search

djoos / EscapeWSSEAuthenticationBundle

Symfony bundle to implement WSSE authentication
http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html
137 stars 59 forks source link

Cache->flushAll() will flush the whole DB if used with Redis #44

Closed ruudk closed 6 years ago

ruudk commented 10 years ago

DeleteNoncesCommand calls flushAll() to flush the entries. If you are using Redis this will issue a FlushDB command that will drop your whole Redis DB.

djoos commented 10 years ago

Hi @ruudk,

thanks for getting in touch! Ideally the command should only delete the nonces that have expired, which is still a todo-item.

If you have any suggestions for improvements, don't hesitate to send a PR...

Thanks in advance for your feedback!

Kind regards, David