zoopcommerce/gateway-module

Zend Framework 2 module that extends zoop's Shard Module with authentication services

Zoop gateway-module

, _(*1)

Zend Framework 2 module that extends zoop's Shard Module with authentication services. Provides:, _(*2)

• Stateful authentication once per session (for stateful services, such as a website with login form)
• Secure remember me cookies for long lasting authentication across sessions
• Stateless authentication once per request (for stateless services, such as a REST api)

Install

Add the following to your composer root:, _(*3)

"require": {
    "zoopcommerce/gateway-module" : "~1.0"
}

Add the module to your application config:, _(*4)

'modules' => [
    'Zoop\GatewayModule'
],

Configuration

See config/module.config.php for config options., _(*5)

Per Session Use

Requires per-session to be enabled in the module config., _(*6)

To login, send the following request:, _(*7)

http://mysite.com/rest/authenticated-user
POST
Content: '{"username": <username>, "password": <password>}'
Accept: application/json
Content-type: application/json

On successful login, request will return the authenticated user object as json. On login fail, will return an error as json., _(*8)

To logout, send the following request:, _(*9)

http://mysite.com/rest/authenticated-user
DELETE

To get the currently authenticated user, send the following request:, _(*10)

http://mysite.com/rest/authenticated-user
GET
Accept: application/json

Remember Me Use

Requires per-session and remember me to be enabled in the module config., _(*11)

If to use the remember me service on login, send the following request:, _(*12)

http://mysite.com/rest/authenticated-user
POST
Content: '{"username": <username>, "password": <password>, "rememberMe": true}'
Accept: application/json
Content-type: application/json

Per Request Use

Requires per request to be enabled in the module config., _(*13)

To authenticate on any request, add the following http header:, _(*14)

http Authorization: Basic <username:password>

must be base64 encoded, and the request must be made across https, not http., _(*15)