protevus/api
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
api/symfony/Bundle/SecurityBundle/DependencyInjection/SecurityExtension.yaml

642 lines
41 KiB
YAML
Raw Permalink Normal View History

add: initial commit
2024-09-26 09:03:21 +00:00
name: SecurityExtension
class_comment: '# * SecurityExtension.
# *
# * @author Fabien Potencier <fabien@symfony.com>
# * @author Johannes M. Schmitt <schmittjoh@gmail.com>'
dependencies:
- name: LogoutUrlExtension
type: class
source: Symfony\Bridge\Twig\Extension\LogoutUrlExtension
- name: AuthenticatorFactoryInterface
type: class
source: Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface
- name: FirewallListenerFactoryInterface
type: class
source: Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\FirewallListenerFactoryInterface
- name: StatelessAuthenticatorFactoryInterface
type: class
source: Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\StatelessAuthenticatorFactoryInterface
- name: UserProviderFactoryInterface
type: class
source: Symfony\Bundle\SecurityBundle\DependencyInjection\Security\UserProvider\UserProviderFactoryInterface
- name: ConfigurationInterface
type: class
source: Symfony\Component\Config\Definition\ConfigurationInterface
- name: InvalidConfigurationException
type: class
source: Symfony\Component\Config\Definition\Exception\InvalidConfigurationException
- name: FileLocator
type: class
source: Symfony\Component\Config\FileLocator
- name: Application
type: class
source: Symfony\Component\Console\Application
- name: Alias
type: class
source: Symfony\Component\DependencyInjection\Alias
- name: IteratorArgument
type: class
source: Symfony\Component\DependencyInjection\Argument\IteratorArgument
- name: ServiceClosureArgument
type: class
source: Symfony\Component\DependencyInjection\Argument\ServiceClosureArgument
- name: TaggedIteratorArgument
type: class
source: Symfony\Component\DependencyInjection\Argument\TaggedIteratorArgument
- name: ChildDefinition
type: class
source: Symfony\Component\DependencyInjection\ChildDefinition
- name: ServiceLocatorTagPass
type: class
source: Symfony\Component\DependencyInjection\Compiler\ServiceLocatorTagPass
- name: ContainerBuilder
type: class
source: Symfony\Component\DependencyInjection\ContainerBuilder
- name: Definition
type: class
source: Symfony\Component\DependencyInjection\Definition
- name: PrependExtensionInterface
type: class
source: Symfony\Component\DependencyInjection\Extension\PrependExtensionInterface
- name: PhpFileLoader
type: class
source: Symfony\Component\DependencyInjection\Loader\PhpFileLoader
- name: Reference
type: class
source: Symfony\Component\DependencyInjection\Reference
- name: EventDispatcher
type: class
source: Symfony\Component\EventDispatcher\EventDispatcher
- name: Expression
type: class
source: Symfony\Component\ExpressionLanguage\Expression
- name: ExpressionLanguage
type: class
source: Symfony\Component\ExpressionLanguage\ExpressionLanguage
- name: PasswordHasherExtension
type: class
source: Symfony\Component\Form\Extension\PasswordHasher\PasswordHasherExtension
- name: ChainRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\ChainRequestMatcher
- name: AttributesRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\AttributesRequestMatcher
- name: HostRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\HostRequestMatcher
- name: IpsRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\IpsRequestMatcher
- name: MethodRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\MethodRequestMatcher
- name: PathRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\PathRequestMatcher
- name: PortRequestMatcher
type: class
source: Symfony\Component\HttpFoundation\RequestMatcher\PortRequestMatcher
- name: Extension
type: class
source: Symfony\Component\HttpKernel\DependencyInjection\Extension
- name: KernelEvents
type: class
source: Symfony\Component\HttpKernel\KernelEvents
- name: NativePasswordHasher
type: class
source: Symfony\Component\PasswordHasher\Hasher\NativePasswordHasher
- name: Pbkdf2PasswordHasher
type: class
source: Symfony\Component\PasswordHasher\Hasher\Pbkdf2PasswordHasher
- name: PlaintextPasswordHasher
type: class
source: Symfony\Component\PasswordHasher\Hasher\PlaintextPasswordHasher
- name: SodiumPasswordHasher
type: class
source: Symfony\Component\PasswordHasher\Hasher\SodiumPasswordHasher
- name: ContainerLoader
type: class
source: Symfony\Component\Routing\Loader\ContainerLoader
- name: AffirmativeStrategy
type: class
source: Symfony\Component\Security\Core\Authorization\Strategy\AffirmativeStrategy
- name: ConsensusStrategy
type: class
source: Symfony\Component\Security\Core\Authorization\Strategy\ConsensusStrategy
- name: PriorityStrategy
type: class
source: Symfony\Component\Security\Core\Authorization\Strategy\PriorityStrategy
- name: UnanimousStrategy
type: class
source: Symfony\Component\Security\Core\Authorization\Strategy\UnanimousStrategy
- name: VoterInterface
type: class
source: Symfony\Component\Security\Core\Authorization\Voter\VoterInterface
- name: ChainUserChecker
type: class
source: Symfony\Component\Security\Core\User\ChainUserChecker
- name: ChainUserProvider
type: class
source: Symfony\Component\Security\Core\User\ChainUserProvider
- name: UserCheckerInterface
type: class
source: Symfony\Component\Security\Core\User\UserCheckerInterface
- name: UserProviderInterface
type: class
source: Symfony\Component\Security\Core\User\UserProviderInterface
- name: TraceableAuthenticator
type: class
source: Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator
- name: TraceableAuthenticatorManagerListener
type: class
source: Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener
- name: CheckPassportEvent
type: class
source: Symfony\Component\Security\Http\Event\CheckPassportEvent
- name: InstallRecipesCommand
type: class
source: Symfony\Flex\Command\InstallRecipesCommand
properties: []
methods:
- name: createHasher
visibility: private
parameters:
- name: config
comment: "# * SecurityExtension.\n# *\n# * @author Fabien Potencier <fabien@symfony.com>\n\
# * @author Johannes M. Schmitt <schmittjoh@gmail.com>\n# */\n# class SecurityExtension\
\ extends Extension implements PrependExtensionInterface\n# {\n# private array\
\ $requestMatchers = [];\n# private array $expressions = [];\n# private array\
\ $contextListeners = [];\n# /** @var list<array{int, AuthenticatorFactoryInterface}>\
\ */\n# private array $factories = [];\n# /** @var AuthenticatorFactoryInterface[]\
\ */\n# private array $sortedFactories = [];\n# private array $userProviderFactories\
\ = [];\n# \n# public function prepend(ContainerBuilder $container): void\n# {\n\
# foreach ($this->getSortedFactories() as $factory) {\n# if ($factory instanceof\
\ PrependExtensionInterface) {\n# $factory->prepend($container);\n# }\n# }\n#\
\ }\n# \n# public function load(array $configs, ContainerBuilder $container):\
\ void\n# {\n# if (!array_filter($configs)) {\n# $hint = class_exists(InstallRecipesCommand::class)\
\ ? 'Try running \"composer symfony:recipes:install symfony/security-bundle\"\
.' : 'Please define your settings for the \"security\" config section.';\n# \n\
# throw new InvalidConfigurationException('The SecurityBundle is enabled but is\
\ not configured. '.$hint);\n# }\n# \n# $mainConfig = $this->getConfiguration($configs,\
\ $container);\n# \n# $config = $this->processConfiguration($mainConfig, $configs);\n\
# \n# // load services\n# $loader = new PhpFileLoader($container, new FileLocator(\\\
dirname(__DIR__).'/Resources/config'));\n# \n# $loader->load('security.php');\n\
# $loader->load('password_hasher.php');\n# $loader->load('security_listeners.php');\n\
# $loader->load('security_authenticator.php');\n# $loader->load('security_authenticator_access_token.php');\n\
# \n# if ($container::willBeAvailable('symfony/twig-bridge', LogoutUrlExtension::class,\
\ ['symfony/security-bundle'])) {\n# $loader->load('templating_twig.php');\n#\
\ }\n# \n# $loader->load('collectors.php');\n# \n# if ($container->hasParameter('kernel.debug')\
\ && $container->getParameter('kernel.debug')) {\n# $loader->load('security_debug.php');\n\
# }\n# \n# if (!$container::willBeAvailable('symfony/expression-language', ExpressionLanguage::class,\
\ ['symfony/security-bundle'])) {\n# $container->removeDefinition('security.expression_language');\n\
# $container->removeDefinition('security.access.expression_voter');\n# $container->removeDefinition('security.is_granted_attribute_expression_language');\n\
# $container->removeDefinition('security.is_csrf_token_valid_attribute_expression_language');\n\
# }\n# \n# if (!class_exists(PasswordHasherExtension::class)) {\n# $container->removeDefinition('form.listener.password_hasher');\n\
# $container->removeDefinition('form.type_extension.form.password_hasher');\n\
# $container->removeDefinition('form.type_extension.password.password_hasher');\n\
# }\n# \n# // set some global scalars\n# $container->setParameter('security.access.denied_url',\
\ $config['access_denied_url']);\n# $container->setParameter('security.authentication.manager.erase_credentials',\
\ $config['erase_credentials']);\n# $container->setParameter('security.authentication.session_strategy.strategy',\
\ $config['session_fixation_strategy']);\n# \n# if (isset($config['access_decision_manager']['service']))\
\ {\n# $container->setAlias('security.access.decision_manager', $config['access_decision_manager']['service']);\n\
# } elseif (isset($config['access_decision_manager']['strategy_service'])) {\n\
# $container\n# ->getDefinition('security.access.decision_manager')\n# ->addArgument(new\
\ Reference($config['access_decision_manager']['strategy_service']));\n# } else\
\ {\n# $container\n# ->getDefinition('security.access.decision_manager')\n# ->addArgument($this->createStrategyDefinition(\n\
# $config['access_decision_manager']['strategy'] ?? MainConfiguration::STRATEGY_AFFIRMATIVE,\n\
# $config['access_decision_manager']['allow_if_all_abstain'],\n# $config['access_decision_manager']['allow_if_equal_granted_denied']\n\
# ));\n# }\n# \n# $container->setParameter('security.authentication.hide_user_not_found',\
\ $config['hide_user_not_found']);\n# \n# if (class_exists(Application::class))\
\ {\n# $loader->load('debug_console.php');\n# }\n# \n# $this->createFirewalls($config,\
\ $container);\n# \n# if ($container::willBeAvailable('symfony/routing', ContainerLoader::class,\
\ ['symfony/security-bundle'])) {\n# $this->createLogoutUrisParameter($config['firewalls']\
\ ?? [], $container);\n# } else {\n# $container->removeDefinition('security.route_loader.logout');\n\
# }\n# \n# $this->createAuthorization($config, $container);\n# $this->createRoleHierarchy($config,\
\ $container);\n# \n# if ($config['password_hashers']) {\n# $this->createHashers($config['password_hashers'],\
\ $container);\n# }\n# \n# if (class_exists(Application::class)) {\n# $loader->load('console.php');\n\
# \n# $container->getDefinition('security.command.user_password_hash')->replaceArgument(1,\
\ array_keys($config['password_hashers']));\n# }\n# \n# $container->registerForAutoconfiguration(VoterInterface::class)\n\
# ->addTag('security.voter');\n# }\n# \n# private function createStrategyDefinition(string\
\ $strategy, bool $allowIfAllAbstainDecisions, bool $allowIfEqualGrantedDeniedDecisions):\
\ Definition\n# {\n# return match ($strategy) {\n# MainConfiguration::STRATEGY_AFFIRMATIVE\
\ => new Definition(AffirmativeStrategy::class, [$allowIfAllAbstainDecisions]),\n\
# MainConfiguration::STRATEGY_CONSENSUS => new Definition(ConsensusStrategy::class,\
\ [$allowIfAllAbstainDecisions, $allowIfEqualGrantedDeniedDecisions]),\n# MainConfiguration::STRATEGY_UNANIMOUS\
\ => new Definition(UnanimousStrategy::class, [$allowIfAllAbstainDecisions]),\n\
# MainConfiguration::STRATEGY_PRIORITY => new Definition(PriorityStrategy::class,\
\ [$allowIfAllAbstainDecisions]),\n# default => throw new InvalidConfigurationException(\\\
sprintf('The strategy \"%s\" is not supported.', $strategy)),\n# };\n# }\n# \n\
# private function createRoleHierarchy(array $config, ContainerBuilder $container):\
\ void\n# {\n# if (!isset($config['role_hierarchy']) || 0 === \\count($config['role_hierarchy']))\
\ {\n# $container->removeDefinition('security.access.role_hierarchy_voter');\n\
# \n# return;\n# }\n# \n# $container->setParameter('security.role_hierarchy.roles',\
\ $config['role_hierarchy']);\n# $container->removeDefinition('security.access.simple_role_voter');\n\
# }\n# \n# private function createAuthorization(array $config, ContainerBuilder\
\ $container): void\n# {\n# foreach ($config['access_control'] as $access) {\n\
# if (isset($access['request_matcher'])) {\n# if ($access['path'] || $access['host']\
\ || $access['port'] || $access['ips'] || $access['methods'] || $access['attributes']\
\ || $access['route']) {\n# throw new InvalidConfigurationException('The \"request_matcher\"\
\ option should not be specified alongside other options. Consider integrating\
\ your constraints inside your RequestMatcher directly.');\n# }\n# $matcher =\
\ new Reference($access['request_matcher']);\n# } else {\n# $attributes = $access['attributes'];\n\
# \n# if ($access['route']) {\n# if (\\array_key_exists('_route', $attributes))\
\ {\n# throw new InvalidConfigurationException('The \"route\" option should not\
\ be specified alongside \"attributes._route\" option. Use just one of the options.');\n\
# }\n# $attributes['_route'] = $access['route'];\n# }\n# \n# $matcher = $this->createRequestMatcher(\n\
# $container,\n# $access['path'],\n# $access['host'],\n# $access['port'],\n# $access['methods'],\n\
# $access['ips'],\n# $attributes\n# );\n# }\n# \n# $roles = $access['roles'];\n\
# if ($access['allow_if']) {\n# $roles[] = $this->createExpression($container,\
\ $access['allow_if']);\n# }\n# \n# $emptyAccess = 0 === \\count(array_filter($access));\n\
# \n# if ($emptyAccess) {\n# throw new InvalidConfigurationException('One or more\
\ access control items are empty. Did you accidentally add lines only containing\
\ a \"-\" under \"security.access_control\"?');\n# }\n# \n# $container->getDefinition('security.access_map')\n\
# ->addMethodCall('add', [$matcher, $roles, $access['requires_channel']]);\n#\
\ }\n# \n# // allow cache warm-up for expressions\n# if (\\count($this->expressions))\
\ {\n# $container->getDefinition('security.cache_warmer.expression')\n# ->replaceArgument(0,\
\ new IteratorArgument(array_values($this->expressions)));\n# } else {\n# $container->removeDefinition('security.cache_warmer.expression');\n\
# }\n# }\n# \n# private function createFirewalls(array $config, ContainerBuilder\
\ $container): void\n# {\n# if (!isset($config['firewalls'])) {\n# return;\n#\
\ }\n# \n# $firewalls = $config['firewalls'];\n# $providerIds = $this->createUserProviders($config,\
\ $container);\n# \n# $container->setParameter('security.firewalls', array_keys($firewalls));\n\
# \n# // make the ContextListener aware of the configured user providers\n# $contextListenerDefinition\
\ = $container->getDefinition('security.context_listener');\n# $arguments = $contextListenerDefinition->getArguments();\n\
# $userProviders = [];\n# foreach ($providerIds as $userProviderId) {\n# $userProviders[]\
\ = new Reference($userProviderId);\n# }\n# $arguments[1] = $userProviderIteratorsArgument\
\ = new IteratorArgument($userProviders);\n# $contextListenerDefinition->setArguments($arguments);\n\
# $nbUserProviders = \\count($userProviders);\n# \n# if ($nbUserProviders > 1)\
\ {\n# $container->setDefinition('security.user_providers', new Definition(ChainUserProvider::class,\
\ [$userProviderIteratorsArgument]));\n# } elseif (0 === $nbUserProviders) {\n\
# $container->removeDefinition('security.listener.user_provider');\n# } else {\n\
# $container->setAlias('security.user_providers', new Alias(current($providerIds)));\n\
# }\n# \n# if (1 === \\count($providerIds)) {\n# $container->setAlias(UserProviderInterface::class,\
\ current($providerIds));\n# }\n# \n# $customUserChecker = false;\n# \n# // load\
\ firewall map\n# $mapDef = $container->getDefinition('security.firewall.map');\n\
# $map = $authenticationProviders = $contextRefs = $authenticators = [];\n# foreach\
\ ($firewalls as $name => $firewall) {\n# if (isset($firewall['user_checker'])\
\ && 'security.user_checker' !== $firewall['user_checker']) {\n# $customUserChecker\
\ = true;\n# }\n# \n# $configId = 'security.firewall.map.config.'.$name;\n# \n\
# [$matcher, $listeners, $exceptionListener, $logoutListener, $firewallAuthenticators]\
\ = $this->createFirewall($container, $name, $firewall, $authenticationProviders,\
\ $providerIds, $configId);\n# \n# if (!$firewallAuthenticators) {\n# $authenticators[$name]\
\ = null;\n# } else {\n# $firewallAuthenticatorRefs = [];\n# foreach ($firewallAuthenticators\
\ as $authenticatorId) {\n# $firewallAuthenticatorRefs[$authenticatorId] = new\
\ Reference($authenticatorId);\n# }\n# $authenticators[$name] = ServiceLocatorTagPass::register($container,\
\ $firewallAuthenticatorRefs);\n# }\n# $contextId = 'security.firewall.map.context.'.$name;\n\
# $isLazy = !$firewall['stateless'] && (!empty($firewall['anonymous']['lazy'])\
\ || $firewall['lazy']);\n# $context = new ChildDefinition($isLazy ? 'security.firewall.lazy_context'\
\ : 'security.firewall.context');\n# $context = $container->setDefinition($contextId,\
\ $context);\n# $context\n# ->replaceArgument(0, new IteratorArgument($listeners))\n\
# ->replaceArgument(1, $exceptionListener)\n# ->replaceArgument(2, $logoutListener)\n\
# ->replaceArgument(3, new Reference($configId))\n# ;\n# \n# $contextRefs[$contextId]\
\ = new Reference($contextId);\n# $map[$contextId] = $matcher;\n# }\n# $container\n\
# ->getDefinition('security.helper')\n# ->replaceArgument(1, $authenticators)\n\
# ;\n# \n# $container->setAlias('security.firewall.context_locator', (string)\
\ ServiceLocatorTagPass::register($container, $contextRefs));\n# \n# $mapDef->replaceArgument(0,\
\ new Reference('security.firewall.context_locator'));\n# $mapDef->replaceArgument(1,\
\ new IteratorArgument($map));\n# \n# // register an autowire alias for the UserCheckerInterface\
\ if no custom user checker service is configured\n# if (!$customUserChecker)\
\ {\n# $container->setAlias(UserCheckerInterface::class, new Alias('security.user_checker',\
\ false));\n# }\n# }\n# \n# private function createFirewall(ContainerBuilder $container,\
\ string $id, array $firewall, array &$authenticationProviders, array $providerIds,\
\ string $configId): array\n# {\n# $config = $container->setDefinition($configId,\
\ new ChildDefinition('security.firewall.config'));\n# $config->replaceArgument(0,\
\ $id);\n# $config->replaceArgument(1, $firewall['user_checker']);\n# \n# // Matcher\n\
# $matcher = null;\n# if (isset($firewall['request_matcher'])) {\n# $matcher =\
\ new Reference($firewall['request_matcher']);\n# } elseif (isset($firewall['pattern'])\
\ || isset($firewall['host'])) {\n# $pattern = $firewall['pattern'] ?? null;\n\
# $host = $firewall['host'] ?? null;\n# $methods = $firewall['methods'] ?? [];\n\
# $matcher = $this->createRequestMatcher($container, $pattern, $host, null, $methods);\n\
# }\n# \n# $config->replaceArgument(2, $matcher ? (string) $matcher : null);\n\
# $config->replaceArgument(3, $firewall['security']);\n# \n# // Security disabled?\n\
# if (false === $firewall['security']) {\n# return [$matcher, [], null, null,\
\ []];\n# }\n# \n# $config->replaceArgument(4, $firewall['stateless']);\n# \n\
# $firewallEventDispatcherId = 'security.event_dispatcher.'.$id;\n# \n# // Provider\
\ id (must be configured explicitly per firewall/authenticator if more than one\
\ provider is set)\n# $defaultProvider = null;\n# if (isset($firewall['provider']))\
\ {\n# if (!isset($providerIds[$normalizedName = str_replace('-', '_', $firewall['provider'])]))\
\ {\n# throw new InvalidConfigurationException(\\sprintf('Invalid firewall \"\
%s\": user provider \"%s\" not found.', $id, $firewall['provider']));\n# }\n#\
\ $defaultProvider = $providerIds[$normalizedName];\n# \n# $container->setDefinition('security.listener.'.$id.'.user_provider',\
\ new ChildDefinition('security.listener.user_provider.abstract'))\n# ->addTag('kernel.event_listener',\
\ ['dispatcher' => $firewallEventDispatcherId, 'event' => CheckPassportEvent::class,\
\ 'priority' => 2048, 'method' => 'checkPassport'])\n# ->replaceArgument(0, new\
\ Reference($defaultProvider));\n# } elseif (1 === \\count($providerIds)) {\n\
# $defaultProvider = reset($providerIds);\n# }\n# \n# $config->replaceArgument(5,\
\ $defaultProvider);\n# \n# // Register Firewall-specific event dispatcher\n#\
\ $container->register($firewallEventDispatcherId, EventDispatcher::class)\n#\
\ ->addTag('event_dispatcher.dispatcher', ['name' => $firewallEventDispatcherId]);\n\
# \n# $eventDispatcherLocator = $container->getDefinition('security.firewall.event_dispatcher_locator');\n\
# $eventDispatcherLocator\n# ->replaceArgument(0, array_merge($eventDispatcherLocator->getArgument(0),\
\ [\n# $id => new ServiceClosureArgument(new Reference($firewallEventDispatcherId)),\n\
# ]))\n# ;\n# \n# // Register Firewall-specific chained user checker\n# $container->register('security.user_checker.chain.'.$id,\
\ ChainUserChecker::class)\n# ->addArgument(new TaggedIteratorArgument('security.user_checker.'.$id));\n\
# \n# // Register listeners\n# $listeners = [];\n# $listenerKeys = [];\n# \n#\
\ // Channel listener\n# $listeners[] = new Reference('security.channel_listener');\n\
# \n# $contextKey = null;\n# // Context serializer listener\n# if (false === $firewall['stateless'])\
\ {\n# $contextKey = $firewall['context'] ?? $id;\n# $listeners[] = new Reference($this->createContextListener($container,\
\ $contextKey, $firewallEventDispatcherId));\n# $sessionStrategyId = 'security.authentication.session_strategy';\n\
# \n# $container\n# ->setDefinition('security.listener.session.'.$id, new ChildDefinition('security.listener.session'))\n\
# ->addTag('kernel.event_subscriber', ['dispatcher' => $firewallEventDispatcherId]);\n\
# } else {\n# $sessionStrategyId = 'security.authentication.session_strategy_noop';\n\
# }\n# $container->setAlias(new Alias('security.authentication.session_strategy.'.$id,\
\ false), $sessionStrategyId);\n# \n# $config->replaceArgument(6, $contextKey);\n\
# \n# // Logout listener\n# $logoutListenerId = null;\n# if (isset($firewall['logout']))\
\ {\n# $logoutListenerId = 'security.logout_listener.'.$id;\n# $logoutListener\
\ = $container->setDefinition($logoutListenerId, new ChildDefinition('security.logout_listener'));\n\
# $logoutListener->replaceArgument(2, new Reference($firewallEventDispatcherId));\n\
# $logoutListener->replaceArgument(3, [\n# 'csrf_parameter' => $firewall['logout']['csrf_parameter'],\n\
# 'csrf_token_id' => $firewall['logout']['csrf_token_id'],\n# 'logout_path' =>\
\ $firewall['logout']['path'],\n# ]);\n# \n# $container->setDefinition('security.logout.listener.default.'.$id,\
\ new ChildDefinition('security.logout.listener.default'))\n# ->replaceArgument(1,\
\ $firewall['logout']['target'])\n# ->addTag('kernel.event_subscriber', ['dispatcher'\
\ => $firewallEventDispatcherId]);\n# \n# // add CSRF provider\n# if ($firewall['logout']['enable_csrf'])\
\ {\n# $logoutListener->addArgument(new Reference($firewall['logout']['csrf_token_manager']));\n\
# }\n# \n# // add session logout listener\n# if (true === $firewall['logout']['invalidate_session']\
\ && false === $firewall['stateless']) {\n# $container->setDefinition('security.logout.listener.session.'.$id,\
\ new ChildDefinition('security.logout.listener.session'))\n# ->addTag('kernel.event_subscriber',\
\ ['dispatcher' => $firewallEventDispatcherId]);\n# }\n# \n# // add cookie logout\
\ listener\n# if (\\count($firewall['logout']['delete_cookies']) > 0) {\n# $container->setDefinition('security.logout.listener.cookie_clearing.'.$id,\
\ new ChildDefinition('security.logout.listener.cookie_clearing'))\n# ->addArgument($firewall['logout']['delete_cookies'])\n\
# ->addTag('kernel.event_subscriber', ['dispatcher' => $firewallEventDispatcherId]);\n\
# }\n# \n# // add clear site data listener\n# if ($firewall['logout']['clear_site_data']\
\ ?? false) {\n# $container->setDefinition('security.logout.listener.clear_site_data.'.$id,\
\ new ChildDefinition('security.logout.listener.clear_site_data'))\n# ->addArgument($firewall['logout']['clear_site_data'])\n\
# ->addTag('kernel.event_subscriber', ['dispatcher' => $firewallEventDispatcherId]);\n\
# }\n# \n# // register with LogoutUrlGenerator\n# $container\n# ->getDefinition('security.logout_url_generator')\n\
# ->addMethodCall('registerListener', [\n# $id,\n# $firewall['logout']['path'],\n\
# $firewall['logout']['csrf_token_id'],\n# $firewall['logout']['csrf_parameter'],\n\
# isset($firewall['logout']['csrf_token_manager']) ? new Reference($firewall['logout']['csrf_token_manager'])\
\ : null,\n# false === $firewall['stateless'] && isset($firewall['context']) ?\
\ $firewall['context'] : null,\n# ])\n# ;\n# \n# $config->replaceArgument(12,\
\ $firewall['logout']);\n# }\n# \n# // Determine default entry point\n# $configuredEntryPoint\
\ = $firewall['entry_point'] ?? null;\n# \n# // Authentication listeners\n# $firewallAuthenticationProviders\
\ = [];\n# [$authListeners, $defaultEntryPoint] = $this->createAuthenticationListeners($container,\
\ $id, $firewall, $firewallAuthenticationProviders, $defaultProvider, $providerIds,\
\ $configuredEntryPoint);\n# \n# // $configuredEntryPoint is resolved into a service\
\ ID and stored in $defaultEntryPoint\n# $configuredEntryPoint = $defaultEntryPoint;\n\
# \n# // authenticator manager\n# $authenticators = array_map(fn ($id) => new\
\ Reference($id), $firewallAuthenticationProviders);\n# $container\n# ->setDefinition($managerId\
\ = 'security.authenticator.manager.'.$id, new ChildDefinition('security.authenticator.manager'))\n\
# ->replaceArgument(0, $authenticators)\n# ->replaceArgument(2, new Reference($firewallEventDispatcherId))\n\
# ->replaceArgument(3, $id)\n# ->replaceArgument(7, $firewall['required_badges']\
\ ?? [])\n# ->addTag('monolog.logger', ['channel' => 'security'])\n# ;\n# \n#\
\ $managerLocator = $container->getDefinition('security.authenticator.managers_locator');\n\
# $managerLocator->replaceArgument(0, array_merge($managerLocator->getArgument(0),\
\ [$id => new ServiceClosureArgument(new Reference($managerId))]));\n# \n# //\
\ authenticator manager listener\n# $container\n# ->setDefinition('security.firewall.authenticator.'.$id,\
\ new ChildDefinition('security.firewall.authenticator'))\n# ->replaceArgument(0,\
\ new Reference($managerId))\n# ;\n# \n# if ($container->hasDefinition('debug.security.firewall'))\
\ {\n# $container\n# ->register('debug.security.firewall.authenticator.'.$id,\
\ TraceableAuthenticatorManagerListener::class)\n# ->setDecoratedService('security.firewall.authenticator.'.$id)\n\
# ->setArguments([new Reference('debug.security.firewall.authenticator.'.$id.'.inner')])\n\
# ->addTag('kernel.reset', ['method' => 'reset'])\n# ;\n# }\n# \n# // user checker\
\ listener\n# $container\n# ->setDefinition('security.listener.user_checker.'.$id,\
\ new ChildDefinition('security.listener.user_checker'))\n# ->replaceArgument(0,\
\ new Reference('security.user_checker.'.$id))\n# ->addTag('kernel.event_subscriber',\
\ ['dispatcher' => $firewallEventDispatcherId]);\n# \n# $listeners[] = new Reference('security.firewall.authenticator.'.$id);\n\
# \n# // Add authenticators to the debug:firewall command\n# if ($container->hasDefinition('security.command.debug_firewall'))\
\ {\n# $debugCommand = $container->getDefinition('security.command.debug_firewall');\n\
# $debugCommand->replaceArgument(3, array_merge($debugCommand->getArgument(3),\
\ [$id => $authenticators]));\n# }\n# \n# $config->replaceArgument(7, $configuredEntryPoint\
\ ?: $defaultEntryPoint);\n# \n# $listeners = array_merge($listeners, $authListeners);\n\
# \n# // Switch user listener\n# if (isset($firewall['switch_user'])) {\n# $listenerKeys[]\
\ = 'switch_user';\n# $listeners[] = new Reference($this->createSwitchUserListener($container,\
\ $id, $firewall['switch_user'], $defaultProvider, $firewall['stateless']));\n\
# }\n# \n# // Access listener\n# $listeners[] = new Reference('security.access_listener');\n\
# \n# // Exception listener\n# $exceptionListener = new Reference($this->createExceptionListener($container,\
\ $firewall, $id, $configuredEntryPoint ?: $defaultEntryPoint, $firewall['stateless']));\n\
# \n# $config->replaceArgument(8, $firewall['access_denied_handler'] ?? null);\n\
# $config->replaceArgument(9, $firewall['access_denied_url'] ?? null);\n# \n#\
\ $container->setAlias('security.user_checker.'.$id, new Alias($firewall['user_checker'],\
\ false));\n# \n# $userCheckerLocator = $container->getDefinition('security.user_checker_locator');\n\
# $userCheckerLocator->replaceArgument(0, array_merge($userCheckerLocator->getArgument(0),\
\ [$id => new ServiceClosureArgument(new Reference('security.user_checker.'.$id))]));\n\
# \n# foreach ($this->getSortedFactories() as $factory) {\n# $key = str_replace('-',\
\ '_', $factory->getKey());\n# if ('custom_authenticators' !== $key && \\array_key_exists($key,\
\ $firewall)) {\n# $listenerKeys[] = $key;\n# }\n# }\n# \n# if ($firewall['custom_authenticators']\
\ ?? false) {\n# foreach ($firewall['custom_authenticators'] as $customAuthenticatorId)\
\ {\n# $listenerKeys[] = $customAuthenticatorId;\n# }\n# }\n# \n# $config->replaceArgument(10,\
\ $listenerKeys);\n# $config->replaceArgument(11, $firewall['switch_user'] ??\
\ null);\n# \n# return [$matcher, $listeners, $exceptionListener, null !== $logoutListenerId\
\ ? new Reference($logoutListenerId) : null, $firewallAuthenticationProviders];\n\
# }\n# \n# private function createContextListener(ContainerBuilder $container,\
\ string $contextKey, ?string $firewallEventDispatcherId): string\n# {\n# if (isset($this->contextListeners[$contextKey]))\
\ {\n# return $this->contextListeners[$contextKey];\n# }\n# \n# $listenerId =\
\ 'security.context_listener.'.\\count($this->contextListeners);\n# $listener\
\ = $container->setDefinition($listenerId, new ChildDefinition('security.context_listener'));\n\
# $listener->replaceArgument(2, $contextKey);\n# if (null !== $firewallEventDispatcherId)\
\ {\n# $listener->replaceArgument(4, new Reference($firewallEventDispatcherId));\n\
# $listener->addTag('kernel.event_listener', ['event' => KernelEvents::RESPONSE,\
\ 'method' => 'onKernelResponse']);\n# }\n# \n# return $this->contextListeners[$contextKey]\
\ = $listenerId;\n# }\n# \n# private function createAuthenticationListeners(ContainerBuilder\
\ $container, string $id, array $firewall, array &$authenticationProviders, ?string\
\ $defaultProvider, array $providerIds, ?string $defaultEntryPoint): array\n#\
\ {\n# $listeners = [];\n# $entryPoints = [];\n# \n# foreach ($this->getSortedFactories()\
\ as $factory) {\n# $key = str_replace('-', '_', $factory->getKey());\n# \n# if\
\ (isset($firewall[$key])) {\n# $userProvider = $this->getUserProvider($container,\
\ $id, $firewall, $key, $defaultProvider, $providerIds);\n# \n# if (!$factory\
\ instanceof AuthenticatorFactoryInterface) {\n# throw new InvalidConfigurationException(\\\
sprintf('Authenticator factory \"%s\" (\"%s\") must implement \"%s\".', get_debug_type($factory),\
\ $key, AuthenticatorFactoryInterface::class));\n# }\n# \n# if (null === $userProvider\
\ && !$factory instanceof StatelessAuthenticatorFactoryInterface) {\n# $userProvider\
\ = $this->createMissingUserProvider($container, $id, $key);\n# }\n# \n# $authenticators\
\ = $factory->createAuthenticator($container, $id, $firewall[$key], $userProvider);\n\
# if (\\is_array($authenticators)) {\n# foreach ($authenticators as $authenticator)\
\ {\n# $authenticationProviders[] = $authenticator;\n# $entryPoints[] = $authenticator;\n\
# }\n# } else {\n# $authenticationProviders[] = $authenticators;\n# $entryPoints[$key]\
\ = $authenticators;\n# }\n# \n# if ($factory instanceof FirewallListenerFactoryInterface)\
\ {\n# $firewallListenerIds = $factory->createListeners($container, $id, $firewall[$key]);\n\
# foreach ($firewallListenerIds as $firewallListenerId) {\n# $listeners[] = new\
\ Reference($firewallListenerId);\n# }\n# }\n# }\n# }\n# \n# if ($container->hasDefinition('debug.security.firewall'))\
\ {\n# foreach ($authenticationProviders as $authenticatorId) {\n# $container->register('debug.'.$authenticatorId,\
\ TraceableAuthenticator::class)\n# ->setDecoratedService($authenticatorId)\n\
# ->setArguments([new Reference('debug.'.$authenticatorId.'.inner')])\n# ;\n#\
\ }\n# }\n# \n# // the actual entry point is configured by the RegisterEntryPointPass\n\
# $container->setParameter('security.'.$id.'._indexed_authenticators', $entryPoints);\n\
# \n# return [$listeners, $defaultEntryPoint];\n# }\n# \n# private function getUserProvider(ContainerBuilder\
\ $container, string $id, array $firewall, string $factoryKey, ?string $defaultProvider,\
\ array $providerIds): ?string\n# {\n# if (isset($firewall[$factoryKey]['provider']))\
\ {\n# if (!isset($providerIds[$normalizedName = str_replace('-', '_', $firewall[$factoryKey]['provider'])]))\
\ {\n# throw new InvalidConfigurationException(\\sprintf('Invalid firewall \"\
%s\": user provider \"%s\" not found.', $id, $firewall[$factoryKey]['provider']));\n\
# }\n# \n# return $providerIds[$normalizedName];\n# }\n# \n# if ($defaultProvider)\
\ {\n# return $defaultProvider;\n# }\n# \n# if (!$providerIds) {\n# if ($firewall['stateless']\
\ ?? false) {\n# return null;\n# }\n# \n# return $this->createMissingUserProvider($container,\
\ $id, $factoryKey);\n# }\n# \n# if ('remember_me' === $factoryKey || 'anonymous'\
\ === $factoryKey) {\n# return 'security.user_providers';\n# }\n# \n# throw new\
\ InvalidConfigurationException(\\sprintf('Not configuring explicitly the provider\
\ for the \"%s\" authenticator on \"%s\" firewall is ambiguous as there is more\
\ than one registered provider. Set the \"provider\" key to one of the configured\
\ providers, even if your custom authenticators don\\'t use it.', $factoryKey,\
\ $id));\n# }\n# \n# private function createMissingUserProvider(ContainerBuilder\
\ $container, string $id, string $factoryKey): string\n# {\n# $userProvider =\
\ \\sprintf('security.user.provider.missing.%s', $factoryKey);\n# $container->setDefinition(\n\
# $userProvider,\n# (new ChildDefinition('security.user.provider.missing'))->replaceArgument(0,\
\ $id)\n# );\n# \n# return $userProvider;\n# }\n# \n# private function createHashers(array\
\ $hashers, ContainerBuilder $container): void\n# {\n# $hasherMap = [];\n# foreach\
\ ($hashers as $class => $hasher) {\n# $hasherMap[$class] = $this->createHasher($hasher);\n\
# }\n# \n# $container\n# ->getDefinition('security.password_hasher_factory')\n\
# ->setArguments([$hasherMap])\n# ;\n# }\n# \n# /**\n# * @param array<string,\
\ mixed> $config\n# *\n# * @return Reference|array<string, mixed>"
- name: createUserProviders
visibility: private
parameters:
- name: config
- name: container
comment: null
- name: createUserDaoProvider
visibility: private
parameters:
- name: name
- name: provider
- name: container
comment: null
- name: getUserProviderId
visibility: private
parameters:
- name: name
comment: null
- name: createExceptionListener
visibility: private
parameters:
- name: container
- name: config
- name: id
- name: defaultEntryPoint
- name: stateless
comment: null
- name: createSwitchUserListener
visibility: private
parameters:
- name: container
- name: id
- name: config
- name: defaultProvider
- name: stateless
comment: null
- name: createExpression
visibility: private
parameters:
- name: container
- name: expression
comment: null
- name: createRequestMatcher
visibility: private
parameters:
- name: container
- name: path
default: 'null'
- name: host
default: 'null'
- name: port
default: 'null'
- name: methods
default: '[]'
- name: ips
default: 'null'
- name: attributes
default: '[]'
comment: null
- name: addAuthenticatorFactory
visibility: public
parameters:
- name: factory
comment: null
- name: addUserProviderFactory
visibility: public
parameters:
- name: factory
comment: null
- name: getXsdValidationBasePath
visibility: public
parameters: []
comment: null
- name: getNamespace
visibility: public
parameters: []
comment: null
- name: getConfiguration
visibility: public
parameters:
- name: config
- name: container
comment: null
- name: isValidIps
visibility: private
parameters:
- name: ips
comment: null
- name: isValidIp
visibility: private
parameters:
- name: cidr
comment: null
- name: getSortedFactories
visibility: private
parameters: []
comment: '# * @return array<int, AuthenticatorFactoryInterface>'
- name: createLogoutUrisParameter
visibility: private
parameters:
- name: firewallsConfig
- name: container
comment: null
traits:
- Symfony\Bridge\Twig\Extension\LogoutUrlExtension
- Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface
- Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\FirewallListenerFactoryInterface
- Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\StatelessAuthenticatorFactoryInterface
- Symfony\Bundle\SecurityBundle\DependencyInjection\Security\UserProvider\UserProviderFactoryInterface
- Symfony\Component\Config\Definition\ConfigurationInterface
- Symfony\Component\Config\Definition\Exception\InvalidConfigurationException
- Symfony\Component\Config\FileLocator
- Symfony\Component\Console\Application
- Symfony\Component\DependencyInjection\Alias
- Symfony\Component\DependencyInjection\Argument\IteratorArgument
- Symfony\Component\DependencyInjection\Argument\ServiceClosureArgument
- Symfony\Component\DependencyInjection\Argument\TaggedIteratorArgument
- Symfony\Component\DependencyInjection\ChildDefinition
- Symfony\Component\DependencyInjection\Compiler\ServiceLocatorTagPass
- Symfony\Component\DependencyInjection\ContainerBuilder
- Symfony\Component\DependencyInjection\Definition
- Symfony\Component\DependencyInjection\Extension\PrependExtensionInterface
- Symfony\Component\DependencyInjection\Loader\PhpFileLoader
- Symfony\Component\DependencyInjection\Reference
- Symfony\Component\EventDispatcher\EventDispatcher
- Symfony\Component\ExpressionLanguage\Expression
- Symfony\Component\ExpressionLanguage\ExpressionLanguage
- Symfony\Component\Form\Extension\PasswordHasher\PasswordHasherExtension
- Symfony\Component\HttpFoundation\ChainRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\AttributesRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\HostRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\IpsRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\MethodRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\PathRequestMatcher
- Symfony\Component\HttpFoundation\RequestMatcher\PortRequestMatcher
- Symfony\Component\HttpKernel\DependencyInjection\Extension
- Symfony\Component\HttpKernel\KernelEvents
- Symfony\Component\PasswordHasher\Hasher\NativePasswordHasher
- Symfony\Component\PasswordHasher\Hasher\Pbkdf2PasswordHasher
- Symfony\Component\PasswordHasher\Hasher\PlaintextPasswordHasher
- Symfony\Component\PasswordHasher\Hasher\SodiumPasswordHasher
- Symfony\Component\Routing\Loader\ContainerLoader
- Symfony\Component\Security\Core\Authorization\Strategy\AffirmativeStrategy
- Symfony\Component\Security\Core\Authorization\Strategy\ConsensusStrategy
- Symfony\Component\Security\Core\Authorization\Strategy\PriorityStrategy
- Symfony\Component\Security\Core\Authorization\Strategy\UnanimousStrategy
- Symfony\Component\Security\Core\Authorization\Voter\VoterInterface
- Symfony\Component\Security\Core\User\ChainUserChecker
- Symfony\Component\Security\Core\User\ChainUserProvider
- Symfony\Component\Security\Core\User\UserCheckerInterface
- Symfony\Component\Security\Core\User\UserProviderInterface
- Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator
- Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener
- Symfony\Component\Security\Http\Event\CheckPassportEvent
- Symfony\Flex\Command\InstallRecipesCommand
interfaces:
- PrependExtensionInterface
Reference in a new issue Copy permalink