[TYPO3-project-4-3] Making RSA Auth default login method?

Steffen Kamper info at sk-typo3.de
Tue May 5 13:30:23 CEST 2009


Hi,

Dmitry Dulepov schrieb:
> Hi!
> 
> Steffen Kamper wrote:
>> but init.php is executed all the time - there could be the check and a
>> constant could be set. Auth service can react on this constant, would be
>> a possibility for a simple fallback.
> 
> Services are pluggable. Currently the rest of the TYPO3 knows nothing of the "superchallenged" or "rsa". It plugs in and works. I really like this independence. If tomorrow someone makes a fingerprint authentication, he should be able to install a corresponding ext with a new service and that should be it. We need some other way to do it.
> 
> Another problem that an installation can have several auth services (rsa, superchallenged, LDAP, t3sec_saltedpw, phpBB, etc). They should agree who actually does the authentication. One part of TYPO3 supports this "agreement" indirectly through service quality and priority variables. But the login form does not support such thing. The login form has to be reworked to depend in authentication services and get data from them. So what we need is:
> - a way to tell what service has priority (EXISTS)
> - a way to load and execute services by priority (EXISTS)
> - a way to add service–specific form fields & JS according to the top service (MISSING)
> 
> Another problem here is that service can return one of several answers:
> - auth ok
> - auth not ok, abort this login attempt
> - don't know, continue to the next service
> 
> The first two cases are all ok but the third one will not work in most cases because the login form will have data only for the top service.
> 
> I am not sure how to solve it. It is quite difficult. The current way is powerful and flexible but complex at the same time. Needs thinking...
> 

i see the problem now, i wasn't aware that it depends on formfields. 
This is indeed not easy to solve. So my first thought is that EM has to 
check the dependency. May be we need an additional array in constraints 
to map dependencies to php libraries.

vg Steffen


More information about the TYPO3-project-4-3 mailing list