symfony.md

title	name	image	tags	snippets
Symfony Tutorial	PHP (Symfony)	/media/platforms/php.png	quickstart	dependencies setup use server-platforms/symfony/dependencies server-platforms/symfony/setup server-platforms/symfony/use

Symfony Tutorial

If you have used Symfony before, you are probably already familiar with the HWIOAuth Bundle. We'll be using it to integrate a Symfony WebApp with Auth0 and achieve Single Sign On with a few simple steps.

Tutorial

1. Add HWIOAuthBundle to your composer.json

${snippet(meta.snippets.dependencies)}

and run composer update

2. Enable the bundle

${snippet(meta.snippets.setup)}

3. Configure the routes

Add the following routes at the beginning of app/config/routing.yml

hwi_oauth_redirect:
    resource: "@HWIOAuthBundle/Resources/config/routing/redirect.xml"
    prefix:   /connect

hwi_oauth_login:
    resource: "@HWIOAuthBundle/Resources/config/routing/login.xml"
    prefix:   /login

auth0_login:
    pattern: /auth0/callback

4. Configure Auth0

${include('./_callbackRegularWebApp')}

In this case, the callbackURL should look something like:

http://yourUrl/auth0/callback

5. Configure the resource owner

Add this to your app/config/config.yml

hwi_oauth:
    firewall_name: secured_area
    resource_owners:
        auth0:
            type:                auth0
            base_url:            https://${account.namespace}
            client_id:           ${account.clientId}
            client_secret:       ${account.clientSecret}

6. User provider

You can create a user provider that implements OAuthAwareUserProviderInterface and set it up in step 7, or you can use one of the predefined services that HWIOAuthBundle provides.

7. Configure the oauth firewall

This is where you set the filters to select which pages are protected (aka, needs login). You can read more on how to configure this at the Symfony security docs.

This is a basic example that allows anonymous users and then restricts access to the /demo/hello/ route. It doesn't store the users in a db.

This file is app/config/security.yml:

security:
    providers:
        hwi:
            id: hwi_oauth.user.provider

    firewalls:
        secured_area:
            anonymous: ~
            oauth:
                resource_owners:
                    auth0: "/auth0/callback"
                login_path:        /login
                use_forward:       false
                failure_path:      /login

                oauth_user_provider:
                    service: hwi_oauth.user.provider

    access_control:
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/demo/hello, roles: ROLE_OAUTH_USER }

Notice that we need to identify the user provided selected in step 6 both in the firewall and in the providers.

8. Triggering login manually or integrating the Auth0Lock

${lockSDK}