You are browsing documentation for version 5.0 of OroCommerce, OroCRM, and OroPlatform, maintained until August 2024 and supported until March 2026. Read version 5.1 (the latest LTS version) of the Oro documentation to get up-to-date information.
See our Release Process documentation for more information on the currently supported and upcoming releases.
Configure Stateless Security Firewalls¶
The Symfony framework allows for the creation of stateless firewalls. In this case, the security token is not serialized for a session.
However, when API calls are utilized in AJAX requests from the UI, the user’s token data from the current session must be used instead of the firewall credentials (e.g., WSSE headers). For this purpose, the firewall should have the context parameter with the context name that the system can use to authenticate the user.
security: firewalls: some_stateless_firewall_with_AJAX_requests: stateless: true context: main # ...