README

Installation

This package does not have Symfony Flex recipe. However, that is planned for future releases.

Step 1

Run composer require robert-kampas/symfony-graph-authenticator

Step 2

Add the line SymfonyGraphAuthenticator\GraphAuth\GraphAuth::class => ['all' => true] to config/bundles.php array.

Step 3

Create file graph_auth.yaml file in config/packages/ folder and populate it with bundle configuration. Refer to Package Configuration section for this step.

Step 4

Edit security.yaml file in config/packages/ folder. Add new user provider, e.g.

providers:
    microsoft_graph_provider:
        id: symfony_graph_auth.user_provider

and register new firewall, e.g.

firewalls:
    main:
        provider: microsoft_graph_provider
        guard:
            authenticators:
                - symfony_graph_auth.authenticator

Step 5

Extend your User entity with SymfonyGraphAuthenticator\GraphAuth\Entity\AbstractUser abstract class. This class has all user entity methods required by the bundle. You will need to run php bin/console doctrine:schema:update --force to create user table with all required columns.

User entity requirements:

• User entity class must be called User and must be in App\Entity\User namespace.
• User accounts must be stored in user table.

What's Next?

Once bundle is setup users can login with their Microsoft account. Upon successfull login user account is created in the databse and user token in stored in session attribute called access_token. You can use microsoft/microsoft-graph (included with this bundle) to query Microsoft Graph. For example,

$graph = new Graph();
$graph->setAccessToken($session->get('access_token'));
$user = $graph
    ->createRequest('GET', '/me')
    ->setReturnType(Model\User::class)
    ->execute();

Package Configuration

Registering New Application

To acquire application id, secret and other configuration values you will need to register new application on your Microsoft Azure account.

1. Login to Microsoft Azure portal.
2. Go to App registrations page.
3. Click on "New registration" and complete new application registration.

You can find more information about registering new applications here.

Configuration Parameters

Scopes

Scopes openid, offline_access, profile and user.read are required for bundle to work. Therefore, these scopes are automatically appended to requested scopes array. This means that these scopes do not have to be added as values to scopes parameter. Although, adding them will not cause any errors.

Example Bundle Configuration File

graph_auth:
    application_id: b8753c4-3f876-9863-88765-88634mk2df3
    application_secret: '2dd[nJ*//ewr00-pfdelL0872.oiw_T'
    directory_id: d8763h-3552-9870a-b38a-ee987388j
    callback_uri: https://my-application.com
    post_logout_redirect_uri: https://my-application.com/login
    scopes:
        - calendars.read
    first_user_role: ROLE_DEVELOPER
    default_user_role: NO_ACCESS

Example Security Configuration File

security:
    role_hierarchy:
        ROLE_DEVELOPER: [ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
        ROLE_ADMIN: [ROLE_USER]
        ROLE_USER: []
    providers:
        microsoft_graph_provider:
            id: symfony_graph_auth.user_provider
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            provider: microsoft_graph_provider
            anonymous: true
            switch_user: true
            pattern: ^/
            logout:
                path: /logout
                invalidate_session: true
            guard:
                authenticators:
                    - symfony_graph_auth.authenticator
    access_control:
        - { path: ^/logout, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/, role: ROLE_USER }

Example User Entity File

<?php

namespace App\Entity;

use Doctrine\ORM\Mapping as ORM;
use SymfonyGraphAuthenticator\GraphAuth\Entity\AbstractUser;

/**
 * @ORM\Table(name="user")
 * @ORM\Entity
 */
final class User extends AbstractUser
{
    /**
     * @ORM\Id()
     * @ORM\GeneratedValue(strategy="AUTO")
     * @ORM\Column(name="id", type="integer")
     */
    private $id;

    public function getId(): int
    {
        return $this->id;
    }
}