Add recipe for nordeus/crowd-user-bundle

2026-09-21 20:36:36 +03:00 · 2018-10-10 12:39:51 +02:00
parent 0f79ab2c11
commit 15aca55ee2
4 changed files with 56 additions and 0 deletions
@@ -0,0 +1,14 @@
+nordeus_crowd_user:
+    # REQUIRED:
+    crowd_application_name: '%env(NORDEUS_CROWD_APPLICATION_NAME)%'
+    crowd_service_url: http://crowd.your_domain.com:8095
+    sso_cookie_domain: your_domain.com
+    crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%'
+    roles_to_groups: '%env(NORDEUS_CROWD_ROLES_TO_GROUPS)%'
+    # OPTIONAL:
+    user_class: Nordeus\CrowdUserBundle\Security\User\CrowdUser
+    sso_cookie_name: crowd.token_key
+    service_uri: /crowd/rest/usermanagement/1/
+    curl_timeout: 2
+    connection_retries: 2
+    user_refresh_time: 600 # seconds
@@ -0,0 +1,24 @@
+security:
+    role_hierarchy:
+        ROLE_ADMIN: ROLE_USER
+
+    providers:
+        crowd_provider:
+            id: crowd.user_provider
+
+    firewalls:
+        main:
+            pattern: ^/
+            crowd_form_login:
+                login_path: nordeus_crowd_user_login
+                check_path: nordeus_crowd_user_login_check
+                default_target_path: /
+            crowd_sso: true
+            logout:
+                path: nordeus_crowd_user_logout
+            anonymous: ~
+            access_denied_handler: crowd.access_denied_handler
+
+    access_control:
+        - { path: ^/(_(profiler|wdt)|img|css|js|login), role: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/, role: ROLE_USER }
@@ -0,0 +1,2 @@
+nordeus_crowd_user:
+    resource: "@NordeusCrowdUserBundle/Resources/config/crowd_user_routing.yml"
@@ -0,0 +1,16 @@
+{
+    "bundles": {
+        "Nordeus\\CrowdUserBundle\\NordeusCrowdUserBundle": ["all"]
+    },
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    },
+    "env": {
+        "NORDEUS_CROWD_APPLICATION_NAME": "crowd_application_name",
+        "NORDEUS_CROWD_APPLICATION_PASSWORD": "crowd_application_password",
+        "NORDEUS_CROWD_ROLES_TO_GROUPS": {
+            "ROLE_USER": [ "users" ],
+            "ROLE_ADMIN": [ "admins", "superadmins" ]
+        }
+    }
+}