From 15aca55ee27798be125f1e236fe7907691807700 Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Wed, 10 Oct 2018 12:39:51 +0200 Subject: [PATCH 1/6] Add recipe for nordeus/crowd-user-bundle --- .../config/packages/nordeus_crowd_user.yaml | 14 +++++++++++ .../2.0/config/packages/security.yaml | 24 +++++++++++++++++++ .../2.0/config/routes/nordeus_crowd_user.yaml | 2 ++ nordeus/crowd-user-bundle/2.0/manifest.json | 16 +++++++++++++ 4 files changed, 56 insertions(+) create mode 100644 nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml create mode 100644 nordeus/crowd-user-bundle/2.0/config/packages/security.yaml create mode 100644 nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml create mode 100644 nordeus/crowd-user-bundle/2.0/manifest.json diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml new file mode 100644 index 00000000..9eb55dc3 --- /dev/null +++ b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml @@ -0,0 +1,14 @@ +nordeus_crowd_user: + # REQUIRED: + crowd_application_name: '%env(NORDEUS_CROWD_APPLICATION_NAME)%' + crowd_service_url: http://crowd.your_domain.com:8095 + sso_cookie_domain: your_domain.com + crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%' + roles_to_groups: '%env(NORDEUS_CROWD_ROLES_TO_GROUPS)%' + # OPTIONAL: + user_class: Nordeus\CrowdUserBundle\Security\User\CrowdUser + sso_cookie_name: crowd.token_key + service_uri: /crowd/rest/usermanagement/1/ + curl_timeout: 2 + connection_retries: 2 + user_refresh_time: 600 # seconds diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml new file mode 100644 index 00000000..e3bd2b26 --- /dev/null +++ b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml @@ -0,0 +1,24 @@ +security: + role_hierarchy: + ROLE_ADMIN: ROLE_USER + + providers: + crowd_provider: + id: crowd.user_provider + + firewalls: + main: + pattern: ^/ + crowd_form_login: + login_path: nordeus_crowd_user_login + check_path: nordeus_crowd_user_login_check + default_target_path: / + crowd_sso: true + logout: + path: nordeus_crowd_user_logout + anonymous: ~ + access_denied_handler: crowd.access_denied_handler + + access_control: + - { path: ^/(_(profiler|wdt)|img|css|js|login), role: IS_AUTHENTICATED_ANONYMOUSLY } + - { path: ^/, role: ROLE_USER } diff --git a/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml new file mode 100644 index 00000000..902944e4 --- /dev/null +++ b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml @@ -0,0 +1,2 @@ +nordeus_crowd_user: + resource: "@NordeusCrowdUserBundle/Resources/config/crowd_user_routing.yml" diff --git a/nordeus/crowd-user-bundle/2.0/manifest.json b/nordeus/crowd-user-bundle/2.0/manifest.json new file mode 100644 index 00000000..b3fade9b --- /dev/null +++ b/nordeus/crowd-user-bundle/2.0/manifest.json @@ -0,0 +1,16 @@ +{ + "bundles": { + "Nordeus\\CrowdUserBundle\\NordeusCrowdUserBundle": ["all"] + }, + "copy-from-recipe": { + "config/": "%CONFIG_DIR%/" + }, + "env": { + "NORDEUS_CROWD_APPLICATION_NAME": "crowd_application_name", + "NORDEUS_CROWD_APPLICATION_PASSWORD": "crowd_application_password", + "NORDEUS_CROWD_ROLES_TO_GROUPS": { + "ROLE_USER": [ "users" ], + "ROLE_ADMIN": [ "admins", "superadmins" ] + } + } +} From b27b704c250c91cd22afbdffb955332520e3782d Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Wed, 10 Oct 2018 12:45:22 +0200 Subject: [PATCH 2/6] Remove NORDEUS_CROWD_ROLES_TO_GROUPS from manifest.json --- .../2.0/config/packages/nordeus_crowd_user.yaml | 4 +++- nordeus/crowd-user-bundle/2.0/manifest.json | 6 +----- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml index 9eb55dc3..d9189a9d 100644 --- a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml +++ b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml @@ -4,7 +4,9 @@ nordeus_crowd_user: crowd_service_url: http://crowd.your_domain.com:8095 sso_cookie_domain: your_domain.com crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%' - roles_to_groups: '%env(NORDEUS_CROWD_ROLES_TO_GROUPS)%' + roles_to_groups: + ROLE_USER: [ users ] + ROLE_ADMIN: [ admins, superadmins ] # OPTIONAL: user_class: Nordeus\CrowdUserBundle\Security\User\CrowdUser sso_cookie_name: crowd.token_key diff --git a/nordeus/crowd-user-bundle/2.0/manifest.json b/nordeus/crowd-user-bundle/2.0/manifest.json index b3fade9b..c979bb8f 100644 --- a/nordeus/crowd-user-bundle/2.0/manifest.json +++ b/nordeus/crowd-user-bundle/2.0/manifest.json @@ -7,10 +7,6 @@ }, "env": { "NORDEUS_CROWD_APPLICATION_NAME": "crowd_application_name", - "NORDEUS_CROWD_APPLICATION_PASSWORD": "crowd_application_password", - "NORDEUS_CROWD_ROLES_TO_GROUPS": { - "ROLE_USER": [ "users" ], - "ROLE_ADMIN": [ "admins", "superadmins" ] - } + "NORDEUS_CROWD_APPLICATION_PASSWORD": "crowd_application_password" } } From 8f675341241b5b233738aae1329c3b24df08423a Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Wed, 10 Oct 2018 12:49:25 +0200 Subject: [PATCH 3/6] Fix filename in routing file --- .../crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml index 902944e4..a5b84803 100644 --- a/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml +++ b/nordeus/crowd-user-bundle/2.0/config/routes/nordeus_crowd_user.yaml @@ -1,2 +1,2 @@ nordeus_crowd_user: - resource: "@NordeusCrowdUserBundle/Resources/config/crowd_user_routing.yml" + resource: "@NordeusCrowdUserBundle/Resources/config/routing.yaml" From 038c23ba644bb6a19dce31a9783981e76eaa6a67 Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Wed, 10 Oct 2018 13:07:43 +0200 Subject: [PATCH 4/6] Rename security.yaml to nordeus_crowd_user.security.yaml --- .../packages/{security.yaml => nordeus_crowd_user.security.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename nordeus/crowd-user-bundle/2.0/config/packages/{security.yaml => nordeus_crowd_user.security.yaml} (100%) diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.security.yaml similarity index 100% rename from nordeus/crowd-user-bundle/2.0/config/packages/security.yaml rename to nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.security.yaml From 2cb19341f017d2102c0b76e8ca3dc00e8a5e3666 Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Wed, 10 Oct 2018 13:10:20 +0200 Subject: [PATCH 5/6] Rename nordeus_crowd_user.security.yaml to security.yaml.example --- .../{nordeus_crowd_user.security.yaml => security.yaml.example} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename nordeus/crowd-user-bundle/2.0/config/packages/{nordeus_crowd_user.security.yaml => security.yaml.example} (100%) diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.security.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example similarity index 100% rename from nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.security.yaml rename to nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example From 325ab63950267eeecc521567627c674281a9f01f Mon Sep 17 00:00:00 2001 From: Djordje Cvijic Date: Sat, 13 Oct 2018 15:26:36 +0200 Subject: [PATCH 6/6] crowd-user-bundle: review fixes --- .../config/packages/nordeus_crowd_user.yaml | 11 ++------- .../2.0/config/packages/security.yaml.example | 24 ------------------- .../crowd-user-bundle/2.0/post-install.txt | 9 +++++++ 3 files changed, 11 insertions(+), 33 deletions(-) delete mode 100644 nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example create mode 100644 nordeus/crowd-user-bundle/2.0/post-install.txt diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml index d9189a9d..f15a40ee 100644 --- a/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml +++ b/nordeus/crowd-user-bundle/2.0/config/packages/nordeus_crowd_user.yaml @@ -1,16 +1,9 @@ +# https://github.com/Nordeus/CrowdUserBundle#4-configure-parameters nordeus_crowd_user: - # REQUIRED: crowd_application_name: '%env(NORDEUS_CROWD_APPLICATION_NAME)%' + crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%' crowd_service_url: http://crowd.your_domain.com:8095 sso_cookie_domain: your_domain.com - crowd_application_password: '%env(NORDEUS_CROWD_APPLICATION_PASSWORD)%' roles_to_groups: ROLE_USER: [ users ] ROLE_ADMIN: [ admins, superadmins ] - # OPTIONAL: - user_class: Nordeus\CrowdUserBundle\Security\User\CrowdUser - sso_cookie_name: crowd.token_key - service_uri: /crowd/rest/usermanagement/1/ - curl_timeout: 2 - connection_retries: 2 - user_refresh_time: 600 # seconds diff --git a/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example b/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example deleted file mode 100644 index e3bd2b26..00000000 --- a/nordeus/crowd-user-bundle/2.0/config/packages/security.yaml.example +++ /dev/null @@ -1,24 +0,0 @@ -security: - role_hierarchy: - ROLE_ADMIN: ROLE_USER - - providers: - crowd_provider: - id: crowd.user_provider - - firewalls: - main: - pattern: ^/ - crowd_form_login: - login_path: nordeus_crowd_user_login - check_path: nordeus_crowd_user_login_check - default_target_path: / - crowd_sso: true - logout: - path: nordeus_crowd_user_logout - anonymous: ~ - access_denied_handler: crowd.access_denied_handler - - access_control: - - { path: ^/(_(profiler|wdt)|img|css|js|login), role: IS_AUTHENTICATED_ANONYMOUSLY } - - { path: ^/, role: ROLE_USER } diff --git a/nordeus/crowd-user-bundle/2.0/post-install.txt b/nordeus/crowd-user-bundle/2.0/post-install.txt new file mode 100644 index 00000000..e9c32f30 --- /dev/null +++ b/nordeus/crowd-user-bundle/2.0/post-install.txt @@ -0,0 +1,9 @@ + + Next: Configure CrowdUserBundle + + + * Configure parameters:: https://github.com/Nordeus/CrowdUserBundle#4-configure-parameters + * Configure your application's security: https://github.com/Nordeus/CrowdUserBundle#5-configure-your-applications-security + * Your application is now ready to use! + +Full documentation is available at: https://github.com/Nordeus/CrowdUserBundle