Symfony dynamic firewall

Question

On a large webapplication, I want our customers to be able to enable/configure their own sigle sign-on (SAML) identity provider. Each customer has it's own specific subdomain allowing our application to determine which firewall should be active. However, I don't want to manually configure each new firewall and clear the cache before changes are taken into effect. Now I read about dependency injection, extensions, compilers and all that, but I just can't seem to find a way to load dynamic firewall settings from the database and apply them. Any idea how I would do this?

FYI, I am using the SamlSPBundle for SSO.

Thanks!

score 5 · Accepted Answer · answered Jan 07 '15 at 15:35

5

I may have figured this out just moments after setting a bounty! ;)

Symfony2 security allows specification of a request_matcher on a per-firewall basis:

http://php-and-symfony.matthiasnoback.nl/2012/07/symfony2-security-using-advanced-request-matchers-to-activate-firewalls/

Custom RequestMatchers must implement a single method that returns true or false based on the Request object. I think this could be used to activate a firewall dynamically. As long as you have a finite number of firewalls (I do), then a custom RequestMatcher could solve your problem.

answered Jan 07 '15 at 15:35

astletron

1,387
1
14
26

This is the best way that I know. – Kamil Adryjanek Jan 12 '15 at 12:20
Better late then never I accepted your answer. We did actually implement it using a request_matcher, thanks! – symfoon Jul 20 '16 at 10:01

Symfony dynamic firewall

1 Answers1