IBX-8290: Reworked REST authentication to comply with the new Symfony…

… authenticator mechanism under separate firewall (#121) * IBX-8290: Reworked REST authentication to comply with the authenticator mechanism under separate firewall * added shared context for BO and REST
ibexa · Jun 20, 2024 · 53e9df8 · 53e9df8
1 parent 311c2d0
commit 53e9df8
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 4 deletions.
diff --git a/ibexa/commerce/5.0/config/packages/security.yaml b/ibexa/commerce/5.0/config/packages/security.yaml
@@ -130,10 +130,17 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+            context: ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
+            context: ibexa
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/experience/5.0/config/packages/security.yaml b/ibexa/experience/5.0/config/packages/security.yaml
@@ -118,10 +118,17 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+            context: ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
+            context: ibexa
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/headless/5.0/config/packages/security.yaml b/ibexa/headless/5.0/config/packages/security.yaml
@@ -118,10 +118,17 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+            context: ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
+            context: ibexa
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/oss/5.0/config/packages/security.yaml b/ibexa/oss/5.0/config/packages/security.yaml
@@ -74,10 +74,17 @@ security:
         #        entry_point: lexik_jwt_authentication.jwt_token_authenticator
         #    stateless: true
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+            context: ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
+            context: ibexa
             form_login:
                 require_previous_session: false
                 enable_csrf: true