Hey guys,

Unless I'm missing something, it is not possible at the moment to easily 
implement a two (or more...)-factor authentication such as for instance 
x.509 + password.
Do you think this is something that might be added some day in the security 
component or do you think it is better to implement ourselves new custom 
providers, listeners and stuff?

This is a delicate problem of course (do they share the same user provider 
or not, etc.) but perhaps some "chained" authentication provider and token 
could be added in Core which would make things easier.

And if it weren't added in core, would you have any particular advice as to 
what to take special care of when implementing it ourselves as a new 
authentication provider?

Best regards,
Jordan

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to