opcoding/azure-active-directory

v1.0.4 2020-02-07 13:04 UTC

Requires

• php: ^7.2.0
• doctrine/orm: ^2.6
• knpuniversity/oauth2-client-bundle: ^1.25
• symfony/security-bundle: 4.*
• symfony/validator: 4.*
• symfony/yaml: 4.*
• thenetworg/oauth2-azure: ^1.4

proprietary

README

Active azure directory bundle for symfony 4 project

Routing

Add the following code in the your config/routes.yaml

opcoding_aad_bundle:
    resource: '@OpcodingAADBundle/Resources/config/routes.yaml'

Edit the bundles.php file and add the following code :

<?php
return [
    OpcodingAADBundle\OpcodingAADBundle::class => ['all' => true]
];

Edit de config/packages/knpu_oauth2_client.yml file and add the following code :

knpu_oauth2_client:
    clients:
        azure:
            type: azure
            client_id: '%env(resolve:AZURE_CLIENT_ID)%'
            client_secret: '%env(resolve:AZURE_CLIENT_SECRET)%'
            redirect_route: connect_azure_check
            redirect_params: {}
            api_version: '1.6'

Then edit the config/packages/security.yml and add the following code according to your needs:

security:
    providers:
        app:
            entity:
                class: OpcodingAADBundle:User
                property: username
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            pattern: ^/
            anonymous: ~
            logout:
                path: app_logout
                target: /
            guard:
                authenticators:
                    - OpcodingAADBundle\Security\AzureAuthenticator

For example, if your application request that all the users must be logged in you can configure it like that :

security:
    firewalls:
        main:
            pattern: ^/
            anonymous: true
            logout:
                path: app_logout
                target: /
            guard:
                authenticators:
                    - OpcodingAADBundle\Security\AzureAuthenticator
    access_control:
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/, role: ROLE_USER }