v23.0.0 PROTOTYPE! [WIP] Authentication [back-end]

app/AppKernel.php

@@ -10,10 +10,10 @@ public function registerBundles() : array
         $bundles = [
             /** SYMFONY */
             new Doctrine\Bundle\DoctrineBundle\DoctrineBundle(),
-            /* new Sensio\Bundle\FrameworkExtraBundle\SensioFrameworkExtraBundle(), */
-            /* new Symfony\Bundle\SecurityBundle\SecurityBundle(), */
+            new Sensio\Bundle\FrameworkExtraBundle\SensioFrameworkExtraBundle(),
             new Symfony\Bundle\FrameworkBundle\FrameworkBundle(),
             new Symfony\Bundle\MonologBundle\MonologBundle(),
+            new Symfony\Bundle\SecurityBundle\SecurityBundle(),
             new Symfony\Bundle\TwigBundle\TwigBundle(),
             /** EXTRA */
             new JMS\SerializerBundle\JMSSerializerBundle(),

app/DoctrineMigrations/Version20160724000000.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace Application\Migrations;
+
+use Doctrine\DBAL\Migrations\AbstractMigration;
+use Doctrine\DBAL\Schema\Schema;
+
+/**
+ * Auto-generated Migration: Please modify to your needs!
+ */
+class Version20160724000000 extends AbstractMigration
+{
+    /**
+     * @param Schema $schema
+     */
+    public function up(Schema $schema)
+    {
+        // this up() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'postgresql', 'Migration can only be executed safely on \'postgresql\'.');
+
+        $this->addSql('CREATE TABLE player_sessions (id SERIAL NOT NULL, player INT NOT NULL, hash VARCHAR(40) NOT NULL, timestamp TIMESTAMP(0) WITHOUT TIME ZONE NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('CREATE INDEX IDX_9CB7DCF398197A65 ON player_sessions (player)');
+        $this->addSql('CREATE INDEX INDEX_SESSION_HASH ON player_sessions (hash)');
+        $this->addSql('ALTER TABLE player_sessions ADD CONSTRAINT FK_9CB7DCF398197A65 FOREIGN KEY (player) REFERENCES players (id) NOT DEFERRABLE INITIALLY IMMEDIATE');
+        $this->addSql('DROP INDEX index_player_name');
+        $this->addSql('ALTER TABLE players ADD passwordHash VARCHAR(40) NOT NULL');
+        $this->addSql('ALTER TABLE players RENAME COLUMN name TO email');
+        $this->addSql('ALTER TABLE players ALTER email TYPE VARCHAR(255)');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_EMAIL ON players (email)');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_EMAIL_AND_PASSWORD ON players (email, passwordHash)');
+    }
+
+    /**
+     * @param Schema $schema
+     */
+    public function down(Schema $schema)
+    {
+        // this down() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'postgresql', 'Migration can only be executed safely on \'postgresql\'.');
+
+        $this->addSql('CREATE SCHEMA public');
+        $this->addSql('DROP TABLE player_sessions');
+        $this->addSql('DROP INDEX INDEX_PLAYER_EMAIL');
+        $this->addSql('DROP INDEX INDEX_PLAYER_EMAIL_AND_PASSWORD');
+        $this->addSql('ALTER TABLE players DROP passwordHash');
+        $this->addSql('ALTER TABLE players RENAME COLUMN email TO name');
+        $this->addSql('ALTER TABLE players ALTER name TYPE VARCHAR(25)');
+        $this->addSql('CREATE INDEX index_player_name ON players (name)');
+    }
+}

app/DoctrineMigrations/Version20160724000001.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace Application\Migrations;
+
+use Doctrine\DBAL\Migrations\AbstractMigration;
+use Doctrine\DBAL\Schema\Schema;
+
+/**
+ * Auto-generated Migration: Please modify to your needs!
+ */
+class Version20160724000001 extends AbstractMigration
+{
+    /**
+     * @param Schema $schema
+     */
+    public function up(Schema $schema)
+    {
+        // this up() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'mysql', 'Migration can only be executed safely on \'mysql\'.');
+
+        $this->addSql('RENAME TABLE players TO users');
+        $this->addSql('CREATE TABLE user_sessions (id INT AUTO_INCREMENT NOT NULL, player INT NOT NULL, hash VARCHAR(40) NOT NULL, timestamp DATETIME NOT NULL, INDEX IDX_7AED791398197A65 (player), INDEX INDEX_SESSION_HASH (hash), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci ENGINE = InnoDB');
+        $this->addSql('ALTER TABLE user_sessions ADD CONSTRAINT FK_7AED791398197A65 FOREIGN KEY (player) REFERENCES users (id)');
+        $this->addSql('DROP INDEX INDEX_PLAYER_NAME ON users');
+        $this->addSql('ALTER TABLE users CHANGE name email VARCHAR(255) NOT NULL, ADD passwordHash VARCHAR(40) NOT NULL');
+        $this->addSql('CREATE INDEX INDEX_USER_EMAIL ON users (email)');
+        $this->addSql('CREATE INDEX INDEX_USER_EMAIL_AND_PASSWORD ON users (email, passwordHash)');
+    }
+
+    /**
+     * @param Schema $schema
+     */
+    public function down(Schema $schema)
+    {
+        // this down() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'mysql', 'Migration can only be executed safely on \'mysql\'.');
+
+        $this->addSql('RENAME TABLE users TO players');
+        $this->addSql('DROP TABLE user_sessions');
+        $this->addSql('DROP INDEX INDEX_USER_EMAIL ON users');
+        $this->addSql('DROP INDEX INDEX_USER_EMAIL_AND_PASSWORD ON users');
+        $this->addSql('ALTER TABLE users CHANGE email name VARCHAR(25) NOT NULL COLLATE utf8_unicode_ci, DROP passwordHash');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_NAME ON users (name)');
+    }
+}

app/DoctrineMigrations/Version20160724000002.php

@@ -0,0 +1,110 @@
+<?php
+
+namespace Application\Migrations;
+
+use Doctrine\DBAL\Migrations\AbstractMigration;
+use Doctrine\DBAL\Schema\Schema;
+
+/**
+ * Auto-generated Migration: Please modify to your needs!
+ */
+class Version20160724000002 extends AbstractMigration
+{
+    /**
+     * @param Schema $schema
+     */
+    public function up(Schema $schema)
+    {
+        // this up() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'sqlite', 'Migration can only be executed safely on \'sqlite\'.');
+
+        $this->addSql('CREATE TABLE player_sessions (id INTEGER NOT NULL, player INTEGER NOT NULL, hash VARCHAR(40) NOT NULL, timestamp DATETIME NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('CREATE INDEX IDX_9CB7DCF398197A65 ON player_sessions (player)');
+        $this->addSql('CREATE INDEX INDEX_SESSION_HASH ON player_sessions (hash)');
+        $this->addSql('DROP INDEX INDEX_BATTLEFIELDS_PLAYER');
+        $this->addSql('DROP INDEX INDEX_BATTLEFIELDS_GAME');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__battlefields AS SELECT id, game, player FROM battlefields');
+        $this->addSql('DROP TABLE battlefields');
+        $this->addSql('CREATE TABLE battlefields (id INTEGER NOT NULL, game INTEGER NOT NULL, player INTEGER NOT NULL, PRIMARY KEY(id), CONSTRAINT FK_EDE65EA6232B318C FOREIGN KEY (game) REFERENCES games (id) NOT DEFERRABLE INITIALLY IMMEDIATE, CONSTRAINT FK_EDE65EA698197A65 FOREIGN KEY (player) REFERENCES players (id) NOT DEFERRABLE INITIALLY IMMEDIATE)');
+        $this->addSql('INSERT INTO battlefields (id, game, player) SELECT id, game, player FROM __temp__battlefields');
+        $this->addSql('DROP TABLE __temp__battlefields');
+        $this->addSql('CREATE INDEX INDEX_BATTLEFIELDS_PLAYER ON battlefields (player)');
+        $this->addSql('CREATE INDEX INDEX_BATTLEFIELDS_GAME ON battlefields (game)');
+        $this->addSql('DROP INDEX UNIQUE_CELL_PER_BATTLEFIELD');
+        $this->addSql('DROP INDEX INDEX_CELLS_BATTLEFIELD');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__cells AS SELECT id, battlefield, coordinate, flags FROM cells');
+        $this->addSql('DROP TABLE cells');
+        $this->addSql('CREATE TABLE cells (id INTEGER NOT NULL, battlefield INTEGER NOT NULL, coordinate VARCHAR(3) NOT NULL COLLATE BINARY, flags INTEGER NOT NULL, PRIMARY KEY(id), CONSTRAINT FK_55C1CBD851B7F6D5 FOREIGN KEY (battlefield) REFERENCES battlefields (id) NOT DEFERRABLE INITIALLY IMMEDIATE)');
+        $this->addSql('INSERT INTO cells (id, battlefield, coordinate, flags) SELECT id, battlefield, coordinate, flags FROM __temp__cells');
+        $this->addSql('DROP TABLE __temp__cells');
+        $this->addSql('CREATE UNIQUE INDEX UNIQUE_CELL_PER_BATTLEFIELD ON cells (battlefield, coordinate)');
+        $this->addSql('CREATE INDEX INDEX_CELLS_BATTLEFIELD ON cells (battlefield)');
+        $this->addSql('DROP INDEX INDEX_GAME_RESULT_WINNER');
+        $this->addSql('DROP INDEX INDEX_GAME_RESULT_GAME');
+        $this->addSql('DROP INDEX UNIQ_A619B3B232B318C');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__game_results AS SELECT id, game, player, timestamp FROM game_results');
+        $this->addSql('DROP TABLE game_results');
+        $this->addSql('CREATE TABLE game_results (id INTEGER NOT NULL, game INTEGER NOT NULL, player INTEGER NOT NULL, timestamp DATETIME NOT NULL, PRIMARY KEY(id), CONSTRAINT FK_A619B3B232B318C FOREIGN KEY (game) REFERENCES games (id) NOT DEFERRABLE INITIALLY IMMEDIATE, CONSTRAINT FK_A619B3B98197A65 FOREIGN KEY (player) REFERENCES players (id) NOT DEFERRABLE INITIALLY IMMEDIATE)');
+        $this->addSql('INSERT INTO game_results (id, game, player, timestamp) SELECT id, game, player, timestamp FROM __temp__game_results');
+        $this->addSql('DROP TABLE __temp__game_results');
+        $this->addSql('CREATE INDEX INDEX_GAME_RESULT_WINNER ON game_results (player)');
+        $this->addSql('CREATE INDEX INDEX_GAME_RESULT_GAME ON game_results (game)');
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_A619B3B232B318C ON game_results (game)');
+        $this->addSql('DROP INDEX INDEX_PLAYER_NAME');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__players AS SELECT id, name, flags FROM players');
+        $this->addSql('DROP TABLE players');
+        $this->addSql('CREATE TABLE players (id INTEGER NOT NULL, flags INTEGER NOT NULL, email VARCHAR(25) NOT NULL, passwordHash VARCHAR(40) NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('INSERT INTO players (id, email, flags) SELECT id, name, flags FROM __temp__players');
+        $this->addSql('DROP TABLE __temp__players');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_EMAIL ON players (email)');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_EMAIL_AND_PASSWORD ON players (email, passwordHash)');
+    }
+
+    /**
+     * @param Schema $schema
+     */
+    public function down(Schema $schema)
+    {
+        // this down() migration is auto-generated, please modify it to your needs
+        $this->skipIf($this->connection->getDatabasePlatform()->getName() != 'sqlite', 'Migration can only be executed safely on \'sqlite\'.');
+
+        $this->addSql('DROP TABLE player_sessions');
+        $this->addSql('DROP INDEX INDEX_BATTLEFIELDS_GAME');
+        $this->addSql('DROP INDEX INDEX_BATTLEFIELDS_PLAYER');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__battlefields AS SELECT id, game, player FROM battlefields');
+        $this->addSql('DROP TABLE battlefields');
+        $this->addSql('CREATE TABLE battlefields (id INTEGER NOT NULL, game INTEGER NOT NULL, player INTEGER NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('INSERT INTO battlefields (id, game, player) SELECT id, game, player FROM __temp__battlefields');
+        $this->addSql('DROP TABLE __temp__battlefields');
+        $this->addSql('CREATE INDEX INDEX_BATTLEFIELDS_GAME ON battlefields (game)');
+        $this->addSql('CREATE INDEX INDEX_BATTLEFIELDS_PLAYER ON battlefields (player)');
+        $this->addSql('DROP INDEX INDEX_CELLS_BATTLEFIELD');
+        $this->addSql('DROP INDEX UNIQUE_CELL_PER_BATTLEFIELD');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__cells AS SELECT id, battlefield, coordinate, flags FROM cells');
+        $this->addSql('DROP TABLE cells');
+        $this->addSql('CREATE TABLE cells (id INTEGER NOT NULL, battlefield INTEGER NOT NULL, coordinate VARCHAR(3) NOT NULL, flags INTEGER NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('INSERT INTO cells (id, battlefield, coordinate, flags) SELECT id, battlefield, coordinate, flags FROM __temp__cells');
+        $this->addSql('DROP TABLE __temp__cells');
+        $this->addSql('CREATE INDEX INDEX_CELLS_BATTLEFIELD ON cells (battlefield)');
+        $this->addSql('CREATE UNIQUE INDEX UNIQUE_CELL_PER_BATTLEFIELD ON cells (battlefield, coordinate)');
+        $this->addSql('DROP INDEX UNIQ_A619B3B232B318C');
+        $this->addSql('DROP INDEX INDEX_GAME_RESULT_GAME');
+        $this->addSql('DROP INDEX INDEX_GAME_RESULT_WINNER');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__game_results AS SELECT id, game, player, timestamp FROM game_results');
+        $this->addSql('DROP TABLE game_results');
+        $this->addSql('CREATE TABLE game_results (id INTEGER NOT NULL, game INTEGER NOT NULL, player INTEGER NOT NULL, timestamp DATETIME NOT NULL, PRIMARY KEY(id))');
+        $this->addSql('INSERT INTO game_results (id, game, player, timestamp) SELECT id, game, player, timestamp FROM __temp__game_results');
+        $this->addSql('DROP TABLE __temp__game_results');
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_A619B3B232B318C ON game_results (game)');
+        $this->addSql('CREATE INDEX INDEX_GAME_RESULT_GAME ON game_results (game)');
+        $this->addSql('CREATE INDEX INDEX_GAME_RESULT_WINNER ON game_results (player)');
+        $this->addSql('DROP INDEX INDEX_PLAYER_EMAIL');
+        $this->addSql('DROP INDEX INDEX_PLAYER_EMAIL_AND_PASSWORD');
+        $this->addSql('CREATE TEMPORARY TABLE __temp__players AS SELECT id, email, flags FROM players');
+        $this->addSql('DROP TABLE players');
+        $this->addSql('CREATE TABLE players (id INTEGER NOT NULL, flags INTEGER NOT NULL, name VARCHAR(25) NOT NULL COLLATE BINARY, PRIMARY KEY(id))');
+        $this->addSql('INSERT INTO players (id, name, flags) SELECT id, email, flags FROM __temp__players');
+        $this->addSql('DROP TABLE __temp__players');
+        $this->addSql('CREATE INDEX INDEX_PLAYER_NAME ON players (name)');
+    }
+}

app/config/config.yml

@@ -1,5 +1,6 @@
 imports:
     - { resource: parameters.yml }
+    - { resource: security.yml }
     - { resource: services.yml }
 
 # Put parameters here that don't need to change on each machine where the app is deployed

app/config/security.yml

@@ -0,0 +1,25 @@
+# To get started with security, check out the documentation:
+# http://symfony.com/doc/current/book/security.html
+security:
+    # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
+    providers:
+        in_memory:
+            memory: ~
+
+        database_users:
+            entity: { class: GameBundle:PlayerSession, property: hash }
+
+    firewalls:
+        # disables authentication for assets and the profiler, adapt it according to your needs
+        dev:
+            pattern: ^/(_(profiler|wdt)|css|images|js)/
+            security: false
+        main:
+            anonymous: ~
+            # activate different ways to authenticate
+
+            # http_basic: ~
+            # http://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate
+
+            # form_login: ~
+            # http://symfony.com/doc/current/cookbook/security/form_login_setup.html

app/config/services.yml

@@ -1,2 +1,3 @@
 imports:
+    - { resource: "@FoundationBundle/Resources/config/services.yml" }
     - { resource: "@GameBundle/Resources/config/services.yml" }

behat.yml

@@ -15,6 +15,9 @@ default:
                 - EM\Tests\Behat\GameBundle\Controller\GameResultControllerContext:
             filters:
                 tags: "@api"
+        api.player.management:
+            paths:
+                - "%paths.base%/tests/behat/suites/api/api.player_management.feature"
         api.response.validation.against.schema:
             paths: [ "%paths.base%/tests/behat/suites/api/api.json.validation.against.schema.feature" ]
             contexts: