Php Symfony2显示“在；在SecurityContext中未找到令牌；而不是我的身份验证异常'；s

你好

我正在尝试为Symfony2中的api设置某种WSSE身份验证。但是，当测试未经授权的调用时，我从框架中得到的不是自定义AuthenticationException，而是AuthenticationCredentialsNotFoundException，状态代码为500

你知道为什么会这样吗？这是我的密码：

WsseListener.php

<?php
namespace KrugerCorp\VOIPBundle\Security\Firewall;

use Symfony\Component\Config\Definition\Exception\Exception;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpKernel\Event\GetResponseEvent;
use Symfony\Component\HttpKernel\Log\LoggerInterface;
use Symfony\Component\Security\Http\Firewall\ListenerInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Core\SecurityContextInterface;
use Symfony\Component\Security\Core\Authentication\AuthenticationManagerInterface;
use KrugerCorp\VOIPBundle\Security\Authentication\Token\WsseTenantToken;

class WsseListener implements ListenerInterface
{
    protected $securityContext;
    protected $authenticationManager;
    protected $logger;

    public function __construct(SecurityContextInterface $securityContext, AuthenticationManagerInterface $authenticationManager, LoggerInterface $logger)
    {
        $this->securityContext = $securityContext;
        $this->authenticationManager = $authenticationManager;
        $this->logger = $logger;
    }

    public function handle(GetResponseEvent $event)
    {
        $request = $event->getRequest();

        $wsseRegex = '/UsernameToken Username="([^"]+)", PasswordDigest="([^"]+)", Nonce="([^"]+)", Created="([^"]+)"/';
        if (!$request->headers->has('x-wsse') || 1 !== preg_match($wsseRegex, $request->headers->get('x-wsse'), $matches))
            return;

        $token = new WsseTenantToken();
        $token->setUser($matches[1]);

        $token->digest  = $matches[2];
        $token->nonce   = $matches[3];
        $token->created = $matches[4];

        try {
            $authToken = $this->authenticationManager->authenticate($token);
            $this->securityContext->setToken($authToken);

            return;
        } catch (AuthenticationException $e) {
            $failedMessage = 'WSSE login failed for '.$token->getUsername()-'. Why? '.$e->getMessage();
            $this->logger->error($failedMessage);

            $response = new Response();
            $response->setStatusCode(403);
            $response->setContent($failedMessage);
            $event->setResponse($response);
            return;
        }

        $response = new Response();
        $response->setStatusCode(403);
        $event->setResponse($response);
    }
} 

我的服务

wsse.security.authentication.provider:
    class: KrugerCorp\VOIPBundle\Security\Authentication\Provider\WsseProvider
    arguments: ["", "%kernel.cache_dir%/security/nonces"]

wsse.security.authentication.listener:
    class: KrugerCorp\VOIPBundle\Security\Firewall\WsseListener
    arguments: ["@security.context", "@security.authentication.manager", "@logger"]
    tags:
      - { name: monolog.logger, channel: wsse }

和mu束类

<?php

namespace KrugerCorp\VOIPBundle;

use Symfony\Component\HttpKernel\Bundle\Bundle;
use KrugerCorp\VOIPBundle\DependencyInjection\Security\Factory\WsseFactory;
use Symfony\Component\DependencyInjection\ContainerBuilder;

class KrugerCorpVOIPBundle extends Bundle
{
    public function build(ContainerBuilder $container)
    {
        parent::build($container);

        $extension = $container->getExtension('security');
        $extension->addSecurityListenerFactory(new WsseFactory());
    }
}

您只捕获了AuthenticationException

但是

还抛出不会被捕获的NonceExpiredException

我的代码审查。。。阅读评论

// I guess loadUserByUsername throws UsernameNotFoundException.
// Wrap it in try catch and throw new AuthenticationException("Bad credentials.");
$tenant = $this->tenantProvider->loadUserByUsername($token->getUsername());

// You will not need this...
if (!$tenant)
    throw new AuthenticationException("Bad credentials.");

// $tenant always true here.
if ($tenant && $this->validateDigest($token->digest, $token->nonce, $token->created, $tenant->getPassword()))
{
    $authenticatedToken = new WsseTenantToken($tenant->getRoles());
    $authenticatedToken->setUser($tenant);

    return $authenticatedToken;
}

是否执行此操作->租户提供程序->loadUserByUsername（$token->getUsername（））；抛出任何异常？
wsse.security.authentication.provider:
    class: KrugerCorp\VOIPBundle\Security\Authentication\Provider\WsseProvider
    arguments: ["", "%kernel.cache_dir%/security/nonces"]

wsse.security.authentication.listener:
    class: KrugerCorp\VOIPBundle\Security\Firewall\WsseListener
    arguments: ["@security.context", "@security.authentication.manager", "@logger"]
    tags:
      - { name: monolog.logger, channel: wsse }

<?php

namespace KrugerCorp\VOIPBundle;

use Symfony\Component\HttpKernel\Bundle\Bundle;
use KrugerCorp\VOIPBundle\DependencyInjection\Security\Factory\WsseFactory;
use Symfony\Component\DependencyInjection\ContainerBuilder;

class KrugerCorpVOIPBundle extends Bundle
{
    public function build(ContainerBuilder $container)
    {
        parent::build($container);

        $extension = $container->getExtension('security');
        $extension->addSecurityListenerFactory(new WsseFactory());
    }
}

try {
    $authToken = $this->authenticationManager->authenticate($token);
    $this->securityContext->setToken($authToken);

    return;
} catch (AuthenticationException $e) {
    // ...
}

$this->authenticationManager->authenticate($token);

// I guess loadUserByUsername throws UsernameNotFoundException.
// Wrap it in try catch and throw new AuthenticationException("Bad credentials.");
$tenant = $this->tenantProvider->loadUserByUsername($token->getUsername());

// You will not need this...
if (!$tenant)
    throw new AuthenticationException("Bad credentials.");

// $tenant always true here.
if ($tenant && $this->validateDigest($token->digest, $token->nonce, $token->created, $tenant->getPassword()))
{
    $authenticatedToken = new WsseTenantToken($tenant->getRoles());
    $authenticatedToken->setUser($tenant);

    return $authenticatedToken;
}