IBX-8290: Reworked REST authentication to comply with the authenticat…

…or mechanism under separate firewall
ibexa · May 29, 2024 · 17b1e4d · 17b1e4d
1 parent cf3ce7f
commit 17b1e4d
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 4 deletions.
diff --git a/ibexa/commerce/5.0/config/packages/security.yaml b/ibexa/commerce/5.0/config/packages/security.yaml
@@ -130,10 +130,14 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/experience/5.0/config/packages/security.yaml b/ibexa/experience/5.0/config/packages/security.yaml
@@ -118,10 +118,14 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/headless/5.0/config/packages/security.yaml b/ibexa/headless/5.0/config/packages/security.yaml
@@ -118,10 +118,14 @@ security:
         #        csrf_token_generator: security.csrf.token_manager
         #    logout: ~
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
             form_login:
                 require_previous_session: false
                 enable_csrf: true

diff --git a/ibexa/oss/5.0/config/packages/security.yaml b/ibexa/oss/5.0/config/packages/security.yaml
@@ -74,10 +74,14 @@ security:
         #        entry_point: lexik_jwt_authentication.jwt_token_authenticator
         #    stateless: true
 
+        ibexa_rest:
+            pattern: ^/api/ibexa
+            custom_authenticators:
+                - Ibexa\Rest\Security\Authenticator\RestAuthenticator
+
         ibexa_front:
             pattern: ^/
             user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
-            ibexa_rest_session: ~
             form_login:
                 require_previous_session: false
                 enable_csrf: true