Skip to content

Commit 793a411

Browse files
gabriela-lubkowskagabriela-lubkowska
committed
Add correct security.yaml to config for sylius 1.11
1 parent 1104343 commit 793a411

File tree

1 file changed

+148
-0
lines changed

1 file changed

+148
-0
lines changed

‎tests/Application/config/sylius/1.11/packages/security.yaml

+148
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,148 @@
1+
parameters:
2+
sylius.security.admin_regex: "^/%sylius_admin.path_name%"
3+
sylius.security.api_regex: "^/api"
4+
sylius.security.shop_regex: "^/(?!%sylius_admin.path_name%|new-api|api/.*|api$|media/.*)[^/]++"
5+
sylius.security.new_api_route: "/new-api"
6+
sylius.security.new_api_regex: "^%sylius.security.new_api_route%"
7+
sylius.security.new_api_admin_route: "%sylius.security.new_api_route%/admin"
8+
sylius.security.new_api_admin_regex: "^%sylius.security.new_api_admin_route%"
9+
sylius.security.new_api_shop_route: "%sylius.security.new_api_route%/shop"
10+
sylius.security.new_api_shop_regex: "^%sylius.security.new_api_shop_route%"
11+
12+
security:
13+
always_authenticate_before_granting: true
14+
providers:
15+
sylius_admin_user_provider:
16+
id: sylius.admin_user_provider.email_or_name_based
17+
sylius_api_admin_user_provider:
18+
id: sylius.admin_user_provider.email_or_name_based
19+
sylius_shop_user_provider:
20+
id: sylius.shop_user_provider.email_or_name_based
21+
sylius_api_shop_user_provider:
22+
id: sylius.shop_user_provider.email_or_name_based
23+
sylius_api_chain_provider:
24+
chain:
25+
providers: [sylius_api_shop_user_provider, sylius_api_admin_user_provider]
26+
27+
encoders:
28+
Sylius\Component\User\Model\UserInterface: argon2i
29+
firewalls:
30+
admin:
31+
switch_user: true
32+
context: admin
33+
pattern: "%sylius.security.admin_regex%"
34+
provider: sylius_admin_user_provider
35+
form_login:
36+
provider: sylius_admin_user_provider
37+
login_path: sylius_admin_login
38+
check_path: sylius_admin_login_check
39+
failure_path: sylius_admin_login
40+
default_target_path: sylius_admin_dashboard
41+
use_forward: false
42+
use_referer: true
43+
csrf_token_generator: security.csrf.token_manager
44+
csrf_parameter: _csrf_admin_security_token
45+
csrf_token_id: admin_authenticate
46+
remember_me:
47+
secret: "%env(APP_SECRET)%"
48+
path: "/%sylius_admin.path_name%"
49+
name: APP_ADMIN_REMEMBER_ME
50+
lifetime: 31536000
51+
remember_me_parameter: _remember_me
52+
logout:
53+
path: sylius_admin_logout
54+
target: sylius_admin_login
55+
anonymous: true
56+
57+
new_api_admin_user:
58+
pattern: "%sylius.security.new_api_route%/admin-user-authentication-token"
59+
provider: sylius_admin_user_provider
60+
stateless: true
61+
anonymous: true
62+
json_login:
63+
check_path: "%sylius.security.new_api_route%/admin-user-authentication-token"
64+
username_path: email
65+
password_path: password
66+
success_handler: lexik_jwt_authentication.handler.authentication_success
67+
failure_handler: lexik_jwt_authentication.handler.authentication_failure
68+
guard:
69+
authenticators:
70+
- lexik_jwt_authentication.jwt_token_authenticator
71+
72+
new_api_shop_user:
73+
pattern: "%sylius.security.new_api_route%/shop-user-authentication-token"
74+
provider: sylius_shop_user_provider
75+
stateless: true
76+
anonymous: true
77+
json_login:
78+
check_path: "%sylius.security.new_api_route%/shop-user-authentication-token"
79+
username_path: email
80+
password_path: password
81+
success_handler: lexik_jwt_authentication.handler.authentication_success
82+
failure_handler: lexik_jwt_authentication.handler.authentication_failure
83+
guard:
84+
authenticators:
85+
- lexik_jwt_authentication.jwt_token_authenticator
86+
87+
new_api:
88+
pattern: "%sylius.security.new_api_regex%/*"
89+
provider: sylius_api_chain_provider
90+
stateless: true
91+
anonymous: lazy
92+
guard:
93+
authenticators:
94+
- lexik_jwt_authentication.jwt_token_authenticator
95+
96+
shop:
97+
switch_user: { role: ROLE_ALLOWED_TO_SWITCH }
98+
context: shop
99+
pattern: "%sylius.security.shop_regex%"
100+
provider: sylius_shop_user_provider
101+
form_login:
102+
success_handler: sylius.authentication.success_handler
103+
failure_handler: sylius.authentication.failure_handler
104+
provider: sylius_shop_user_provider
105+
login_path: sylius_shop_login
106+
check_path: sylius_shop_login_check
107+
failure_path: sylius_shop_login
108+
default_target_path: sylius_shop_homepage
109+
use_forward: false
110+
use_referer: true
111+
csrf_token_generator: security.csrf.token_manager
112+
csrf_parameter: _csrf_shop_security_token
113+
csrf_token_id: shop_authenticate
114+
remember_me:
115+
secret: "%env(APP_SECRET)%"
116+
name: APP_SHOP_REMEMBER_ME
117+
lifetime: 31536000
118+
remember_me_parameter: _remember_me
119+
logout:
120+
path: sylius_shop_logout
121+
target: sylius_shop_login
122+
invalidate_session: false
123+
success_handler: sylius.handler.shop_user_logout
124+
anonymous: true
125+
126+
dev:
127+
pattern: ^/(_(profiler|wdt)|css|images|js)/
128+
security: false
129+
130+
access_control:
131+
- { path: "%sylius.security.admin_regex%/_partial", role: IS_AUTHENTICATED_ANONYMOUSLY, ips: [127.0.0.1, ::1] }
132+
- { path: "%sylius.security.admin_regex%/_partial", role: ROLE_NO_ACCESS }
133+
- { path: "%sylius.security.shop_regex%/_partial", role: IS_AUTHENTICATED_ANONYMOUSLY, ips: [127.0.0.1, ::1] }
134+
- { path: "%sylius.security.shop_regex%/_partial", role: ROLE_NO_ACCESS }
135+
136+
- { path: "%sylius.security.admin_regex%/login", role: IS_AUTHENTICATED_ANONYMOUSLY }
137+
- { path: "%sylius.security.api_regex%/login", role: IS_AUTHENTICATED_ANONYMOUSLY }
138+
- { path: "%sylius.security.shop_regex%/login", role: IS_AUTHENTICATED_ANONYMOUSLY }
139+
140+
- { path: "%sylius.security.shop_regex%/register", role: IS_AUTHENTICATED_ANONYMOUSLY }
141+
- { path: "%sylius.security.shop_regex%/verify", role: IS_AUTHENTICATED_ANONYMOUSLY }
142+
143+
- { path: "%sylius.security.admin_regex%", role: ROLE_ADMINISTRATION_ACCESS }
144+
- { path: "%sylius.security.api_regex%/.*", role: ROLE_API_ACCESS }
145+
- { path: "%sylius.security.shop_regex%/account", role: ROLE_USER }
146+
147+
- { path: "%sylius.security.new_api_admin_regex%/.*", role: ROLE_API_ACCESS }
148+
- { path: "%sylius.security.new_api_shop_regex%/.*", role: IS_AUTHENTICATED_ANONYMOUSLY }

0 commit comments

Comments
 (0)