Compare commits

..
Author SHA1 Message Date
github-action[bot]andgithub-action[bot] 9a01c9bf64 Create Flex endpoint 2026-08-27 11:04:04 +00:00
3 changed files with 141 additions and 58 deletions
+4 -4
View File
@@ -1,8 +1,8 @@
{
"aliases": [],
"recipes": {
"indexnowkit/symfony-bundle": [
"0.15"
"sulu/mcp-bundle": [
"1.0"
]
},
"recipe-conflicts": [],
@@ -12,9 +12,9 @@
"_links": {
"repository": "github.com/symfony/recipes-contrib",
"origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2048/{package_dotted}.{version}.json",
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2034/{package_dotted}.{version}.json",
"recipe_template_relative": "{package_dotted}.{version}.json",
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2048/archived/{package_dotted}/{ref}.json",
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2034/archived/{package_dotted}/{ref}.json",
"archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
}
}
-54
View File
@@ -1,54 +0,0 @@
{
"manifests": {
"indexnowkit/symfony-bundle": {
"manifest": {
"bundles": {
"IndexNowKit\\SymfonyBundle\\IndexNowKitBundle": [
"all"
]
},
"copy-from-recipe": {
"config/": "%CONFIG_DIR%/"
},
"env": {
"#1": "The IndexNow key, served at /<key>.txt. Generate one into .env.local: bin/console indexnow:key:generate --write-env",
"#2": "Empty outside production = dry run (nothing is sent); empty in production = a configuration error indexnow:check explains",
"INDEXNOW_KEY": "",
"#3": "The public URL of the site (console commands and Messenger workers have no request to read it from)",
"INDEXNOW_BASE_URL": "https://www.example.com"
},
"post-install-output": [
" <fg=blue;options=bold>IndexNow</> is installed: search engines (Yandex, Bing, Naver, Seznam, ...) get told which pages changed.",
"",
" <options=bold>Next steps:</>",
" 1. Run <comment>bin/console indexnow:key:generate --write-env</> \u2014 writes <comment>INDEXNOW_KEY</> to <comment>.env.local</>",
" 2. Set <comment>INDEXNOW_BASE_URL</> to the public URL of the site",
" 3. Add <comment>#[IndexNow(route: '...')]</> to the entities that have a public page (needs <comment>indexnowkit/doctrine</>)",
" 4. Run <comment>bin/console indexnow:check</> \u2014 it verifies the key file, the transport and the configuration",
"",
" Documentation: https://github.com/indexnowkit/php/tree/main/packages/symfony-bundle"
]
},
"files": {
"config/packages/indexnowkit.yaml": {
"contents": [
"indexnowkit:",
" key: '%env(INDEXNOW_KEY)%'",
" base_url: '%env(INDEXNOW_BASE_URL)%'",
""
],
"executable": false
},
"config/routes/indexnowkit.yaml": {
"contents": [
"indexnowkit:",
" resource: '@IndexNowKitBundle/config/routes.php'",
""
],
"executable": false
}
},
"ref": "269a7a203ca9a6b9eacadb8f4bc621b1e1481e59"
}
}
}
+137
View File
@@ -0,0 +1,137 @@
{
"manifests": {
"sulu/mcp-bundle": {
"manifest": {
"bundles": {
"Symfony\\AI\\McpBundle\\McpBundle": [
"all"
],
"Sulu\\Mcp\\Infrastructure\\Symfony\\HttpKernel\\SuluMcpBundle": [
"all"
]
},
"copy-from-recipe": {
"config/": "%CONFIG_DIR%/"
},
"env": {
"SULU_MCP_SERVER_URL": "https://localhost"
},
"gitignore": [
"/config/jwt/*.pem"
],
"post-install-output": [
" <bg=blue;fg=white> </>",
" <bg=blue;fg=white> What's next? </>",
" <bg=blue;fg=white> </>",
"",
" * Set <comment>SULU_MCP_SERVER_URL</> in <comment>.env.local</> to the public base URL of this installation.",
"",
" * Generate the RSA key pair league/oauth2-server-bundle signs its tokens with,",
" and point the OAUTH_* variables at it. Without it every MCP request fails with",
" \"Invalid key supplied\":",
"",
" mkdir -p config/jwt",
" openssl genrsa -aes128 -out config/jwt/private.pem 4096",
" openssl rsa -in config/jwt/private.pem -pubout -out config/jwt/public.pem",
"",
" * The password and implicit grants of <comment>league/oauth2-server-bundle</> are deprecated while unset",
" and MCP does not use them. Turn them off in <comment>config/packages/league_oauth2_server.yaml</>:",
"",
" league_oauth2_server:",
" authorization_server:",
" enable_password_grant: false",
" enable_implicit_grant: false",
"",
" * Create the OAuth tables: <comment>bin/console doctrine:migrations:diff</> and <comment>migrate</>",
"",
" * Declare the MCP firewall in <comment>config/packages/security.yaml</> BEFORE the admin firewall.",
" Both patterns match /admin/mcp and Symfony applies the first one in declaration order:",
"",
" firewalls:",
" mcp:",
" pattern: ^/admin/mcp/?$",
" provider: sulu",
" stateless: true",
" entry_point: sulu_mcp.authentication_entry_point",
" oauth2: true",
" admin:",
" pattern: ^/admin(\\/|$)",
" # ...existing admin firewall...",
"",
" The pattern is anchored on purpose: /admin/mcp/authorize and /admin/mcp/consent/...",
" need the logged-in Sulu user and must fall through to the admin firewall.",
" Let the client-authenticated endpoints through in <comment>access_control</>:",
"",
" - { path: ^/\\.well-known/oauth-, roles: PUBLIC_ACCESS }",
" - { path: ^/admin/mcp/register$, roles: PUBLIC_ACCESS }",
" - { path: ^/admin/mcp/token$, roles: PUBLIC_ACCESS }",
" - { path: ^/admin/mcp/?$, roles: IS_AUTHENTICATED_FULLY }",
"",
" * Create an OAuth client for hosted clients such as Claude.ai or ChatGPT:",
" <comment>bin/console sulu:mcp:create-client \"Claude.ai Production\"</>",
" Claude Code registers itself dynamically and needs no client up front.",
"",
" * Full guide: <comment>https://github.com/sulu/SuluMcpBundle/blob/1.0/docs/configuration.md</>"
]
},
"files": {
"config/packages/sulu_mcp.yaml": {
"contents": [
"sulu_mcp:",
" # Publicly reachable base URL of this Sulu installation. Together with mcp_path",
" # it forms the OAuth issuer and the resource identifier of the discovery documents.",
" server_url: '%env(SULU_MCP_SERVER_URL)%'",
"",
"# The two sections below configure other bundles. They live in this file rather than in",
"# their own so they merge with whatever those bundles' recipes wrote, instead of taking",
"# ownership of a file that is not ours.",
"",
"mcp:",
" http:",
" # DNS rebinding protection. Left unset it accepts localhost only, so a server",
" # reachable under its own domain answers every request with \"403 Forbidden:",
" # Invalid Host header.\" after the OAuth handshake already succeeded, and without",
" # writing anything to the log. Hosts carry no port.",
" allowed_hosts:",
" - '%env(key:host:url:SULU_MCP_SERVER_URL)%'",
" - localhost",
" - 127.0.0.1",
" - '[::1]'",
"",
"league_oauth2_server:",
" scopes:",
" # `available` is contributed by SuluMcpBundle. `default` applies to clients that",
" # request no scope of their own, and league leaves it to the project. Scope lists",
" # are appended across files, so the entries the league recipe wrote stay; drop",
" # them there if the project does not use them.",
" default: ['mcp:tools', 'mcp:resources']",
""
],
"executable": false
},
"config/routes/sulu_mcp.yaml": {
"contents": [
"# MCP transport endpoint, registered by symfony/mcp-bundle at the path configured",
"# in config/packages/sulu_mcp.yaml. Declare it only once - a second \"type: mcp\"",
"# entry makes the route loader fail.",
"mcp:",
" resource: .",
" type: mcp",
"",
"# OAuth endpoints behind the admin prefix. The prefix must match mcp_path.",
"sulu_mcp_admin:",
" resource: '@SuluMcpBundle/config/routing_admin.yaml'",
" prefix: /admin",
"",
"# RFC 8414 / RFC 9728 discovery documents, unprefixed in the host's /.well-known/ namespace.",
"sulu_mcp_website:",
" resource: '@SuluMcpBundle/config/routing_website.yaml'",
""
],
"executable": false
}
},
"ref": "82ffa93812d4dff9e9d5673751749ddc8f65b46c"
}
}
}