container1.yml 2.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. security:
  2. acl: ~
  3. encoders:
  4. JMS\FooBundle\Entity\User1: plaintext
  5. JMS\FooBundle\Entity\User2:
  6. algorithm: sha1
  7. encode_as_base64: false
  8. iterations: 5
  9. JMS\FooBundle\Entity\User3:
  10. algorithm: md5
  11. JMS\FooBundle\Entity\User4:
  12. id: security.encoder.foo
  13. JMS\FooBundle\Entity\User5:
  14. algorithm: pbkdf2
  15. hash_algorithm: sha1
  16. encode_as_base64: false
  17. iterations: 5
  18. key_length: 30
  19. JMS\FooBundle\Entity\User6:
  20. algorithm: bcrypt
  21. cost: 15
  22. providers:
  23. default:
  24. memory:
  25. users:
  26. foo: { password: foo, roles: ROLE_USER }
  27. digest:
  28. memory:
  29. users:
  30. foo: { password: foo, roles: 'ROLE_USER, ROLE_ADMIN' }
  31. basic:
  32. memory:
  33. users:
  34. foo: { password: 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33, roles: ROLE_SUPER_ADMIN }
  35. bar: { password: 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33, roles: [ROLE_USER, ROLE_ADMIN] }
  36. service:
  37. id: user.manager
  38. chain:
  39. chain:
  40. providers: [service, basic]
  41. firewalls:
  42. simple: { pattern: /login, security: false }
  43. secure:
  44. stateless: true
  45. http_basic: true
  46. http_digest:
  47. secret: TheSecret
  48. form_login: true
  49. anonymous: true
  50. switch_user: true
  51. x509: true
  52. remote_user: true
  53. logout: true
  54. remember_me:
  55. secret: TheSecret
  56. user_checker: ~
  57. host:
  58. pattern: /test
  59. host: foo\.example\.org
  60. methods: [GET,POST]
  61. anonymous: true
  62. http_basic: true
  63. with_user_checker:
  64. anonymous: ~
  65. http_basic: ~
  66. user_checker: app.user_checker
  67. simple_auth:
  68. provider: default
  69. anonymous: ~
  70. simple_form: { authenticator: simple_authenticator }
  71. role_hierarchy:
  72. ROLE_ADMIN: ROLE_USER
  73. ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
  74. ROLE_REMOTE: ROLE_USER,ROLE_ADMIN
  75. access_control:
  76. - { path: /blog/524, role: ROLE_USER, requires_channel: https, methods: [get, POST]}
  77. -
  78. path: /blog/.*
  79. role: IS_AUTHENTICATED_ANONYMOUSLY
  80. - { path: /blog/524, role: IS_AUTHENTICATED_ANONYMOUSLY, allow_if: "token.getUsername() matches '/^admin/'" }