From 15aca55ee27798be125f1e236fe7907691807700 Mon Sep 17 00:00:00 2001
From: Djordje Cvijic <djordjec@nordeus.com>
Date: Wed, 10 Oct 2018 12:39:51 +0200
Subject: [PATCH] Add recipe for nordeus/crowd-user-bundle

---
 .../config/packages/nordeus_crowd_user.yaml   | 14 +++++++++++
 .../2.0/config/packages/security.yaml         | 24 +++++++++++++++++++
 .../2.0/config/routes/nordeus_crowd_user.yaml |  2 ++
 nordeus/crowd-user-bundle/2.0/manifest.json   | 16 +++++++++++++
 4 files changed, 56 insertions(+)
 create mode 100644 nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml
 create mode 100644 nordeus/crowd-user-bundle/2.0/config/packages/security.yaml
 create mode 100644 nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml
 create mode 100644 nordeus/crowd-user-bundle/2.0/manifest.json

diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml
new file mode 100644
index 00000000..9eb55dc3
--- /dev/null
+++ b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml
@@ -0,0 +1,14 @@
+nordeus_crowd_user:
+    # REQUIRED:
+    crowd_application_name: '%env(NORDEUS_CROWD_APPLICATION_NAME)%'
+    crowd_service_url: http://crowd.your_domain.com:8095
+    sso_cookie_domain: your_domain.com
+    crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%'
+    roles_to_groups: '%env(NORDEUS_CROWD_ROLES_TO_GROUPS)%'
+    # OPTIONAL:
+    user_class: Nordeus\CrowdUserBundle\Security\User\CrowdUser
+    sso_cookie_name: crowd.token_key
+    service_uri: /crowd/rest/usermanagement/1/
+    curl_timeout: 2
+    connection_retries: 2
+    user_refresh_time: 600 # seconds
diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml
new file mode 100644
index 00000000..e3bd2b26
--- /dev/null
+++ b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml
@@ -0,0 +1,24 @@
+security:
+    role_hierarchy:
+        ROLE_ADMIN: ROLE_USER
+
+    providers:
+        crowd_provider:
+            id: crowd.user_provider
+
+    firewalls:
+        main:
+            pattern: ^/
+            crowd_form_login:
+                login_path: nordeus_crowd_user_login
+                check_path: nordeus_crowd_user_login_check
+                default_target_path: /
+            crowd_sso: true
+            logout:
+                path: nordeus_crowd_user_logout
+            anonymous: ~
+            access_denied_handler: crowd.access_denied_handler
+
+    access_control:
+        - { path: ^/(_(profiler|wdt)|img|css|js|login), role: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/, role: ROLE_USER }
diff --git a/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml
new file mode 100644
index 00000000..902944e4
--- /dev/null
+++ b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml
@@ -0,0 +1,2 @@
+nordeus_crowd_user:
+    resource: "@NordeusCrowdUserBundle/Resources/config/crowd_user_routing.yml"
diff --git a/nordeus/crowd-user-bundle/2.0/manifest.json b/nordeus/crowd-user-bundle/2.0/manifest.json
new file mode 100644
index 00000000..b3fade9b
--- /dev/null
+++ b/nordeus/crowd-user-bundle/2.0/manifest.json
@@ -0,0 +1,16 @@
+{
+    "bundles": {
+        "Nordeus\\CrowdUserBundle\\NordeusCrowdUserBundle": ["all"]
+    },
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    },
+    "env": {
+        "NORDEUS_CROWD_APPLICATION_NAME": "crowd_application_name",
+        "NORDEUS_CROWD_APPLICATION_PASSWORD": "crowd_application_password",
+        "NORDEUS_CROWD_ROLES_TO_GROUPS": {
+            "ROLE_USER": [ "users" ],
+            "ROLE_ADMIN": [ "admins", "superadmins" ]
+        }
+    }
+}