Configure Feature Depended Firewall Listeners

API can be enabled or disabled via the system configuration. When the API is disabled, the API-related security firewalls should not use some authorization listeners, for example, WSSE and OAuth authorization should be disabled.

To be able to configure listeners for a disabled API feature, use the following configuration:

oro_api:
    api_firewalls:
        api_wsse_secured: # firewall name
            feature_name: web_api
            feature_firewall_listeners: # list of listeners that should be disabled when the feature specified in feature_name option is disabled
                - Oro\Bundle\WsseAuthenticationBundle\Security\Http\Firewall\WsseAuthenticationListener
        wsse_secured:
            feature_name: web_api
            feature_firewall_listeners:
                - Oro\Bundle\WsseAuthenticationBundle\Security\Http\Firewall\WsseAuthenticationListener
        api_options:
            feature_name: web_api