Security Firewalls

[r8or0pz]

Why don't you leverage the use of Security Firewalls for your Bundle?

[baldurrensch]

Because they are for something else. I don't quite follow what you want to do with the firewalls. Care to elaborate?

[r8or0pz]

Sure! Symfony2 filrewall is for Security and Authentication: http://symfony.com/doc/current/book/security.html
Here is good article on Custom Authentication Provider: http://symfony.com/doc/current/cookbook/security/custom_authentication_provider.html
Look how pattern works - you don't need to add @SignedRequest for every resource (otherwise SignedRequestBundle is activated for every controller):

security:
    firewalls:
        wsse_secured:
            pattern:   /api/.*
            stateless: true
            wsse:      true

[baldurrensch]

This would work for requests, but not really for responses. I also think that it would be quite a bit more complex, and having multiple authenticated providers sometimes leads to weirdnesses. I think that the very similar implementation with both as request and response listeners is more elegant, and I don't really see any real benefit in your proposal. That being said, feel free to open a PR.

[r8or0pz]

There's no point for PR if you don't see the benefit.