security: providers: oauth: id: base_oauth_bundle.oauth_user_provider role_hierarchy: ROLE_ADMIN: [ROLE_USER, ROLE_ALLOWED_TO_SWITCH] ROLE_SUPER_ADMIN: ROLE_ADMIN firewalls: api: pattern: ^/api # fos_oauth: true stateless: true anonymous: true http_basic: ~ dev: pattern: ^/(_(profiler|wdt)|css|images|js)/ security: false secured_area: pattern: ^/ logout: path: /logout target: / success_handler: base_admin.security.logout.handler anonymous: true # HWIOAuthBundle + BaseOAuthBundle Configuration oauth: login_path: /login failure_path: /login check_path: /login resource_owners: login: /login_check oauth_user_provider: service: base_oauth_bundle.oauth_user_provider access_control: - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY } - { path: ^/admin/, role: ROLE_ADMIN } #security: # # encoders: # FOS\UserBundle\Model\UserInterface: bcrypt # # role_hierarchy: # ROLE_AUTHOR: ROLE_USER # ROLE_EDITOR: ROLE_AUTHOR # ROLE_ADMIN: [ROLE_USER, ROLE_ALLOWED_TO_SWITCH] # ROLE_SUPER_ADMIN: [ROLE_ADMIN, ROLE_USER_CREATE] # # providers: # fos_userbundle: # id: fos_user.user_provider.username_email # # firewalls: # # api: # pattern: ^/api # fos_oauth: true # stateless: true # anonymous: true # http_basic: ~ # # # oauth_token: # pattern: ^/oauth/v2/token # security: false # ## oauth_authorize: ## pattern: ^/oauth/v2/auth ## form_login: ## provider: fos_userbundle ### csrf_token_generator: security.csrf.token_manager ## login_path: /oauth/v2/auth/login ## check_path: /oauth/v2/auth/login_check ## anonymous: true ## stateless: false ## context: base_context # # main: # pattern: ^/ # form_login: # provider: fos_userbundle ## csrf_token_generator: security.csrf.token_manager # success_handler: baseuserbundle.initaction_handler # logout: # path: /logout # target: / # success_handler: base_admin.security.logout.handler # switch_user: true # anonymous: true # stateless: false # context: base_context # # # dev: # pattern: ^/(_(profiler|wdt)|css|images|js)/ # security: false # # access_control: # - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY } # - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY } # - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY } # - { path: ^/admin/, role: ROLE_ADMIN } # - { path: ^/api/devices.json, roles: [ IS_AUTHENTICATED_ANONYMOUSLY ] } # - { path: ^/api/devicelogs.json, roles: [ IS_AUTHENTICATED_ANONYMOUSLY ] } # - { path: ^/api, roles: [ ROLE_USER ] }