title: Securing Symfony RESTful API consumed by angular front?
body: <p>I have set up a Symfony based API which is being used by an Angular front end which is totally dependent of it (User registration included)</p>
  
  <p>I have read multiple threads recommending using WSSE or FOSOAuthServerBundle but I'm not sure about the best method ?</p>
  
  <p>If I understood correctly, WSSE has to send for each API request x-wsse headers which make me think it is not the best suited for performance.</p>
  
  <p>About the FOSAuthServerBundle I have never used it and looks a bit complicated to me compared to WSSE, thus that's why I'm asking there before trying to implement it.</p>
  
  <p>I have 2 simple groups of user (basic and admin), what would be the best way to secure my API, additionally providing an easy way to keep user persistence (I mean accesses through the different pages)? </p>
  
  <p>How should it be in the Angular front side ?</p>
  
  <p>Thanks for your help.</p>
  
  <p>Refs: <a href="http://blog.tankist.de/blog/2013/07/16/oauth2-explained-part-1-principles-and-terminology/" rel="nofollow">http://blog.tankist.de/blog/2013/07/16/oauth2-explained-part-1-principles-and-terminology/</a></p>
  
  <p><a href="http://obtao.com/blog/2013/06/configure-wsse-on-symfony-with-fosrestbundle/" rel="nofollow">http://obtao.com/blog/2013/06/configure-wsse-on-symfony-with-fosrestbundle/</a></p>