Ajour OAuth bundle

app/AppKernel.php

@@ -25,6 +25,7 @@ public function registerBundles()
             new ApiBundle\ApiBundle(),
             new FOS\UserBundle\FOSUserBundle(),
             new FOS\RestBundle\FOSRestBundle(),
+            new FOS\OAuthServerBundle\FOSOAuthServerBundle(),
             new JMS\SerializerBundle\JMSSerializerBundle(),
         );
 

app/config/config.yml

@@ -31,12 +31,12 @@ framework:
     fragments:       ~
     http_method_override: true
 
-# Twig Configuration
+# Twig
 twig:
     debug:            "%kernel.debug%"
     strict_variables: "%kernel.debug%"
 
-# Assetic Configuration
+# Assetic
 assetic:
     debug:          "%kernel.debug%"
     use_controller: false
@@ -49,7 +49,7 @@ assetic:
         #yui_css:
         #    jar: "%kernel.root_dir%/Resources/java/yuicompressor-2.4.7.jar"
 
-# Doctrine Configuration
+# Doctrine
 doctrine:
     dbal:
         driver:   pdo_mysql
@@ -71,21 +71,21 @@ doctrine:
         naming_strategy: doctrine.orm.naming_strategy.underscore
         auto_mapping: true
 
-# Swiftmailer Configuration
+# Swiftmailer
 swiftmailer:
     transport: "%mailer_transport%"
     host:      "%mailer_host%"
     username:  "%mailer_user%"
     password:  "%mailer_password%"
     spool:     { type: memory }
 
-# FOSUserBundle Configuration
+# FOSUserBundle
 fos_user:
     db_driver: orm
     firewall_name: main
     user_class: ApiBundle\Entity\FosUser
 
-# FOSRestBundle Configuration
+# FOSRestBundle
 fos_rest:
     param_fetcher_listener: true
     body_listener: true
@@ -103,3 +103,13 @@ fos_rest:
         default_engine: twig
     routing_loader:
         default_format: json
+
+# FOSOauthBundle
+fos_oauth_server:
+    db_driver: orm    # Driver availables: orm, mongodb, or propel
+    client_class:        ApiBundle\Entity\Client
+    access_token_class:  ApiBundle\Entity\AccessToken
+    refresh_token_class: ApiBundle\Entity\RefreshToken
+    auth_code_class:     ApiBundle\Entity\AuthCode
+    service:
+        user_provider: fos_user.user_manager

app/config/routing.yml

@@ -10,3 +10,12 @@ rest :
   type : rest
   resource : "routing_rest.yml"
   prefix : /api
+
+api.oauth:
+    resource: "@ApiBundle/Resources/config/routing.yml"
+
+fos_oauth_server_token:
+    resource:     "@FOSOAuthServerBundle/Resources/config/routing/token.xml"
+
+fos_oauth_server_authorize:
+    resource:     "@FOSOAuthServerBundle/Resources/config/routing/authorize.xml"

app/config/security.yml

@@ -13,6 +13,21 @@ security:
             id: fos_user.user_provider.username
 
     firewalls:
+        oauth_authorize:
+            pattern:    ^/oauth/v2/auth
+            form_login:
+                provider: fos_userbundle
+                check_path: /oauth/v2/auth_login_check
+                login_path: /oauth/v2/auth_login
+            anonymous: true
+        oauth_token:
+            pattern:    ^/oauth/v2/token
+            security:   false
+        api:
+            pattern:    ^/api
+            fos_oauth:  true
+            stateless:  true
+            anonymous:  false # can be omitted as its default value
         main:
             pattern: ^/
             form_login:
@@ -23,6 +38,7 @@ security:
             anonymous:    true
 
     access_control:
+        - { path: ^/api, roles: IS_AUTHENTICATED_FULLY }
         - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }

composer.json

@@ -22,7 +22,8 @@
         "friendsofsymfony/user-bundle": "~2.0@dev",
         "friendsofsymfony/rest-bundle": "^1.7",
         "jms/serializer-bundle": "^1.0",
-        "twig/twig": "~1.0"
+        "twig/twig": "~1.0",
+        "friendsofsymfony/oauth-server-bundle": "dev-master"
     },
     "require-dev": {
         "sensio/generator-bundle": "~2.3"