flint / antenna

JWT (JSON Web Token) and Symfony Security.

Flint

Flint is a microframework build on top of Silex. It brings the full Router, conventions and structure to Silex.

You can read more about in it documentation.

antenna's Issues

WebToken time to live should be configurable

UsernamePasswordAuthenticator should have a way to control the time to live for a WebToken. Currently it is always 7 days.

Add LICENSE header on source files.

Support additional Claims in WebToken

WebToken currently only supports the iat, sub and exp claims. These are defined in the standard, but it is possible to have arbitrary claims sent in a token.

It accepts anything as username/password request

I found an issue in the UsernamePasswordAuthenticator. When I send a request with the following body;

{
    "test": "[email protected]",
    "fault": "johndoe"
}

It returns a valid token because of this line;

list($username, $password) = array_values($body + ['username' => null, 'password' => null]);

Is it possible to add some (configurable) validation on the JSON request?

The license file is missing in the repo

Move from Authenticators to "real" Symfony Security implementation.

Maybe?