search

remiq / apigility-zfc-rbac-recipe

Recipe for ZfcRbac authorization in OAuth2 authenticated Apigility
22 stars 9 forks source link

Why is AuthenticationListener needed? #4

Open metanav opened 9 years ago

metanav commented 9 years ago

Why do we need an AuthenticationListener? Overriding the roleId in default Apigility mvc-auth is not a good idea. We can get the user role from UserEntity in IdentityProvider class itself. This way we do not need a listener any more. Am I missing some point here?