How is the WSSE authentication implemented in Oro Platform?

[dmitrii_fediuk]

Step 1. Escape\WSSEAuthenticationBundle\Security\Http\Firewall\Listener::handle()

https://github.com/djoos/EscapeWSSEAuthenticationBundle/blob/2.2.2/Security/Http/Firewall/Listener.php#L62-L105

Step 2. Oro\Bundle\UserBundle\Security\WsseAuthProvider::authenticate()

https://github.com/orocrm/platform/blob/2.2.0/src/Oro/Bundle/UserBundle/Security/WsseAuthProvider.php#L71-L103

Step 3. Oro\Bundle\UserBundle\Security\WsseAuthProvider::getValidUserApi()

https://github.com/orocrm/platform/blob/2.2.0/src/Oro/Bundle/UserBundle/Security/WsseAuthProvider.php#L105-L148

Step 4. Escape\WSSEAuthenticationBundle\Security\Core\Authentication\Provider\Provider::validateDigest()

[dmitrii_fediuk]

See also:

• What is the WSSE authentication and how to use it?
• How is oro:wsse:generate-header implemented?