82a3b99a31
* bring back deprecated methods * bump packages * fix SAML redirect * config flag for break times * use class constant instead of string in attributes * throw if all tags were not found - fixes #4792
1001 lines
40 KiB
PHP
1001 lines
40 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the Kimai time-tracking app.
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace App\DependencyInjection;
|
|
|
|
use App\Entity\Customer;
|
|
use App\Entity\User;
|
|
use App\Form\Helper\ActivityHelper;
|
|
use App\Form\Helper\CustomerHelper;
|
|
use App\Form\Helper\ProjectHelper;
|
|
use App\Repository\InvoiceDocumentRepository;
|
|
use App\Timesheet\Rounding\RoundingInterface;
|
|
use Symfony\Component\Config\Definition\Builder\ArrayNodeDefinition;
|
|
use Symfony\Component\Config\Definition\Builder\TreeBuilder;
|
|
use Symfony\Component\Config\Definition\ConfigurationInterface;
|
|
|
|
final class Configuration implements ConfigurationInterface
|
|
{
|
|
public function getConfigTreeBuilder(): TreeBuilder
|
|
{
|
|
$treeBuilder = new TreeBuilder('kimai');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $treeBuilder->getRootNode();
|
|
|
|
$node
|
|
->children()
|
|
->scalarNode('data_dir')
|
|
->defaultNull()
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
if (null === $value) {
|
|
return false;
|
|
}
|
|
|
|
return !file_exists($value);
|
|
})
|
|
->thenInvalid('Data directory does not exist')
|
|
->end()
|
|
->end()
|
|
->append($this->getUserNode())
|
|
->append($this->getCustomerNode())
|
|
->append($this->getTimesheetNode())
|
|
->append($this->getInvoiceNode())
|
|
->append($this->getExportNode())
|
|
->append($this->getCalendarNode())
|
|
->append($this->getThemeNode())
|
|
->append($this->getCompanyNode())
|
|
->append($this->getDefaultsNode())
|
|
->append($this->getPermissionsNode())
|
|
->append($this->getLdapNode())
|
|
->append($this->getSamlNode())
|
|
->append($this->getQuickEntryNode())
|
|
->append($this->getActivityNode())
|
|
->append($this->getProjectNode())
|
|
->append($this->getFeaturesNode())
|
|
->end()
|
|
->end();
|
|
|
|
return $treeBuilder;
|
|
}
|
|
|
|
private function getFeaturesNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('features');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
// this feature was deactivated in order to deprecate/remove it in the future, very likely not necessary for anyone
|
|
->integerNode('user_registration')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getQuickEntryNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('quick_entry');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->integerNode('recent_activities')
|
|
->defaultValue(5)
|
|
->end()
|
|
->integerNode('recent_activity_weeks')
|
|
->defaultNull()
|
|
->end()
|
|
->integerNode('minimum_rows')
|
|
->defaultValue(3)
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getProjectNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('project');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('choice_pattern')
|
|
->defaultValue(ProjectHelper::PATTERN_NAME)
|
|
->end()
|
|
->booleanNode('copy_teams_on_create')
|
|
->defaultValue(false)
|
|
->end()
|
|
->scalarNode('number_format')
|
|
->defaultValue('{pc,4}')
|
|
->end()
|
|
->booleanNode('allow_duplicate_number')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getActivityNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('activity');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('choice_pattern')
|
|
->defaultValue(ActivityHelper::PATTERN_NAME)
|
|
->end()
|
|
->booleanNode('allow_inline_create')
|
|
->defaultValue(false)
|
|
->end()
|
|
->scalarNode('number_format')
|
|
->defaultValue('{ac,4}')
|
|
->end()
|
|
->booleanNode('allow_duplicate_number')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getTimesheetNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('timesheet');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->children()
|
|
->scalarNode('default_begin')
|
|
->defaultValue('now')
|
|
->end()
|
|
->scalarNode('mode')
|
|
->defaultValue('default')
|
|
->end()
|
|
->booleanNode('markdown_content')
|
|
->defaultValue(false)
|
|
->end()
|
|
->integerNode('duration_increment')
|
|
->defaultValue(15)
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
if ($value !== null) {
|
|
return ((int) $value) < 0;
|
|
}
|
|
|
|
return false;
|
|
})
|
|
->thenInvalid('Duration increment is invalid')
|
|
->end()
|
|
->end()
|
|
->integerNode('time_increment')
|
|
->defaultValue(15)
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
if ($value !== null) {
|
|
return ((int) $value) < 1;
|
|
}
|
|
|
|
return false;
|
|
})
|
|
->thenInvalid('Time increment is invalid')
|
|
->end()
|
|
->end()
|
|
->arrayNode('rounding')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->children()
|
|
->arrayNode('days')
|
|
->useAttributeAsKey('key')
|
|
->scalarPrototype()->end()
|
|
->defaultValue(['monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday', 'sunday'])
|
|
->end()
|
|
->integerNode('begin')
|
|
->defaultValue(1)
|
|
->end()
|
|
->integerNode('end')
|
|
->defaultValue(1)
|
|
->end()
|
|
->integerNode('duration')
|
|
->defaultValue(0)
|
|
->end()
|
|
->scalarNode('mode')
|
|
->defaultValue('default')
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
$class = 'App\\Timesheet\\Rounding\\' . ucfirst($value) . 'Rounding';
|
|
if (class_exists($class)) {
|
|
$rounding = new $class();
|
|
|
|
return !($rounding instanceof RoundingInterface);
|
|
}
|
|
|
|
return false;
|
|
})
|
|
->thenInvalid('Chosen rounding mode is invalid')
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->defaultValue([
|
|
'default' => [
|
|
'days' => ['monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday', 'sunday'],
|
|
'begin' => 1,
|
|
'end' => 1,
|
|
'duration' => 0,
|
|
'mode' => 'default'
|
|
]
|
|
])
|
|
->end()
|
|
->arrayNode('rates')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->children()
|
|
->arrayNode('days')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->isRequired()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->floatNode('factor')
|
|
->isRequired()
|
|
->defaultValue(1)
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
return $value <= 0;
|
|
})
|
|
->thenInvalid('A rate factor smaller or equals 0 is not allowed')
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->arrayNode('active_entries')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->integerNode('hard_limit')
|
|
->defaultValue(1)
|
|
->validate()
|
|
->ifTrue(function ($value) {
|
|
return $value <= 0;
|
|
})
|
|
->thenInvalid('The hard_limit must be at least 1')
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('rules')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('allow_future_times')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('allow_zero_duration')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('allow_overbooking_budget')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('allow_overlapping_records')
|
|
->defaultTrue()
|
|
->end()
|
|
->scalarNode('lockdown_period_start')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('lockdown_period_end')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('lockdown_period_timezone')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('lockdown_grace_period')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('lockdown_grace_period')
|
|
->defaultNull()
|
|
->end()
|
|
->integerNode('break_warning_duration')
|
|
->defaultValue(0)
|
|
->end()
|
|
->integerNode('long_running_duration')
|
|
->defaultValue(0)
|
|
->end()
|
|
->booleanNode('require_activity')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('break_time_active')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getInvoiceNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('invoice');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->arrayNode('defaults')
|
|
->scalarPrototype()->end()
|
|
->defaultValue([
|
|
'var/invoices/',
|
|
InvoiceDocumentRepository::DEFAULT_DIRECTORY
|
|
])
|
|
->end()
|
|
->arrayNode('documents')
|
|
->requiresAtLeastOneElement()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->scalarNode('number_format')
|
|
->defaultValue('{Y}/{cy,3}')
|
|
->end()
|
|
->booleanNode('upload_twig')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getExportNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('export');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->arrayNode('defaults')
|
|
->scalarPrototype()->end()
|
|
->defaultValue([
|
|
'var/export/',
|
|
'templates/export/renderer/'
|
|
])
|
|
->end()
|
|
->arrayNode('documents')
|
|
->requiresAtLeastOneElement()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getCalendarNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('calendar');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('week_numbers')->defaultTrue()->end()
|
|
->integerNode('day_limit')->defaultValue(4)->end()
|
|
->scalarNode('slot_duration')->defaultValue('00:30:00')->end()
|
|
->arrayNode('businessHours')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('begin')->defaultValue('08:00')->end()
|
|
->scalarNode('end')->defaultValue('20:00')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('visibleHours')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('begin')->defaultValue('00:00')->end()
|
|
->scalarNode('end')->defaultValue('23:59')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('google')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('api_key')->defaultNull()->end()
|
|
->arrayNode('sources')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->children()
|
|
->scalarNode('id')->isRequired()->end()
|
|
->scalarNode('color')->defaultValue('#ccc')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->booleanNode('weekends')->defaultTrue()->end()
|
|
->integerNode('dragdrop_amount')
|
|
->defaultValue(5)
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
if ($v === null || $v < 0 || $v > 20) {
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
})
|
|
->thenInvalid('The dragdrop_amount must be between 0 and 20')
|
|
->end()
|
|
->end()
|
|
->booleanNode('dragdrop_data')->defaultFalse()->end()
|
|
->enumNode('title_pattern')
|
|
->values(['{activity}', '{project}', '{customer}', '{description}'])
|
|
->defaultValue('{activity}')
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getThemeNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('theme');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('show_about')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('colors_limited')
|
|
->defaultTrue()
|
|
->end()
|
|
->scalarNode('color_choices')
|
|
->defaultValue(implode(',', [
|
|
'Silver|#c0c0c0', 'Gray|#808080', 'Black|#000000',
|
|
'Maroon|#800000', 'Brown|#a52a2a', 'Red|#ff0000', 'Orange|#ffa500',
|
|
'Gold|#ffd700', 'Yellow|#ffff00', 'Peach|#ffdab9', 'Khaki|#f0e68c',
|
|
'Olive|#808000', 'Lime|#00ff00', 'Jelly|#9acd32', 'Green|#008000', 'Teal|#008080',
|
|
'Aqua|#00ffff', 'LightBlue|#add8e6', 'DeepSky|#00bfff', 'Dodger|#1e90ff', 'Blue|#0000ff', 'Navy|#000080',
|
|
'Purple|#800080', 'Fuchsia|#ff00ff', 'Violet|#ee82ee', 'Rose|#ffe4e1', 'Lavender|#E6E6FA'
|
|
]))
|
|
->end()
|
|
->arrayNode('branding')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('logo')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('mini')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('company')
|
|
->defaultNull()
|
|
->end()
|
|
->scalarNode('title')
|
|
->defaultNull()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->booleanNode('avatar_url')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getCompanyNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('company');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('financial_year')->defaultNull()->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getUserNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('user');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('login')
|
|
->defaultTrue()
|
|
->end()
|
|
->booleanNode('registration')
|
|
->defaultFalse()
|
|
->end()
|
|
->booleanNode('password_reset')
|
|
->defaultTrue()
|
|
->end()
|
|
->integerNode('password_reset_retry_ttl')
|
|
->defaultValue(3600)
|
|
->end()
|
|
->integerNode('password_reset_token_ttl')
|
|
->defaultValue(86400)
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getCustomerNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('customer');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('choice_pattern')
|
|
->defaultValue(CustomerHelper::PATTERN_NAME)
|
|
->end()
|
|
->scalarNode('number_format')
|
|
->defaultValue('{cc,4}')
|
|
->end()
|
|
->arrayNode('rules')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('allow_duplicate_number')
|
|
->defaultFalse()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getDefaultsNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('defaults');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->arrayNode('customer')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('timezone')->defaultNull()->end()
|
|
->scalarNode('country')->defaultValue('DE')->end()
|
|
->scalarNode('currency')->defaultValue(Customer::DEFAULT_CURRENCY)->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('user')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('timezone')->defaultNull()->end()
|
|
->scalarNode('language')->defaultValue(User::DEFAULT_LANGUAGE)->end()
|
|
->scalarNode('theme')->defaultValue('default')->end()
|
|
->scalarNode('currency')->defaultValue(Customer::DEFAULT_CURRENCY)->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getPermissionsNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('permissions');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->arrayNode('sets')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->useAttributeAsKey('key')
|
|
->isRequired()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->end()
|
|
->arrayNode('maps')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->useAttributeAsKey('key')
|
|
->isRequired()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->end()
|
|
->arrayNode('roles')
|
|
->requiresAtLeastOneElement()
|
|
->useAttributeAsKey('key')
|
|
->arrayPrototype()
|
|
->isRequired()
|
|
->scalarPrototype()->end()
|
|
->defaultValue([])
|
|
->end()
|
|
->defaultValue([
|
|
'ROLE_USER' => [],
|
|
'ROLE_TEAMLEAD' => [],
|
|
'ROLE_ADMIN' => [],
|
|
'ROLE_SUPER_ADMIN' => [],
|
|
])
|
|
->end()
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getLdapNode(): ArrayNodeDefinition
|
|
{
|
|
$treeBuilder = new TreeBuilder('ldap');
|
|
$node = $treeBuilder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('activate')
|
|
->defaultFalse()
|
|
->end()
|
|
->arrayNode('connection')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('host')->defaultNull()->end()
|
|
->scalarNode('port')->defaultValue(389)->end()
|
|
->scalarNode('useStartTls')->defaultFalse()->end()
|
|
->scalarNode('useSsl')->defaultFalse()->end()
|
|
->scalarNode('username')->end()
|
|
->scalarNode('password')->end()
|
|
->scalarNode('bindRequiresDn')->defaultTrue()->end()
|
|
->scalarNode('baseDn')->end()
|
|
->scalarNode('accountCanonicalForm')->end()
|
|
->scalarNode('accountDomainName')->end()
|
|
->scalarNode('accountDomainNameShort')->end()
|
|
->scalarNode('accountFilterFormat')
|
|
->defaultNull()
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
if (empty($v)) {
|
|
return false;
|
|
}
|
|
if ($v[0] !== '(' || (substr_count($v, '(') !== substr_count($v, ')'))) {
|
|
return true;
|
|
}
|
|
|
|
return (substr_count($v, '%s') !== 1);
|
|
})
|
|
->thenInvalid('The accountFilterFormat must be enclosed by a matching number of parentheses "()" and contain one "%%s" replacer for the username')
|
|
->end()
|
|
->end()
|
|
->scalarNode('allowEmptyPassword')->end()
|
|
->scalarNode('optReferrals')->end()
|
|
->scalarNode('tryUsernameSplit')->end()
|
|
->scalarNode('networkTimeout')->end()
|
|
->end()
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
return $v['useSsl'] && $v['useStartTls'];
|
|
})
|
|
->thenInvalid('The ldap.connection.useSsl and ldap.connection.useStartTls options are mutually exclusive.')
|
|
->end()
|
|
->end()
|
|
->arrayNode('user')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('baseDn')->defaultNull()->end()
|
|
->scalarNode('filter')
|
|
->defaultValue('')
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
if (empty($v)) {
|
|
return false;
|
|
}
|
|
if ($v[0] !== '(' || (substr_count($v, '(') !== substr_count($v, ')'))) {
|
|
return true;
|
|
}
|
|
|
|
return (stripos($v, '%s') !== false);
|
|
})
|
|
->thenInvalid('The ldap.user.filter must be enclosed by a matching number of parentheses "()" and must NOT contain a "%%s" replacer')
|
|
->end()
|
|
->end()
|
|
->scalarNode('attributesFilter')->defaultValue('(objectClass=*)')->end()
|
|
->scalarNode('usernameAttribute')->defaultValue('uid')->end()
|
|
->arrayNode('attributes')
|
|
->defaultValue([])
|
|
->arrayPrototype()
|
|
->children()
|
|
->scalarNode('ldap_attr')->isRequired()->cannotBeEmpty()->end()
|
|
->scalarNode('user_method')->isRequired()->cannotBeEmpty()->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('role')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('baseDn')->defaultNull()->end()
|
|
->scalarNode('filter')->end()
|
|
->scalarNode('usernameAttribute')->defaultValue('dn')->end()
|
|
->scalarNode('nameAttribute')->defaultValue('cn')->end()
|
|
->scalarNode('userDnAttribute')->defaultValue('member')->end()
|
|
->arrayNode('groups')
|
|
->defaultValue([])
|
|
->arrayPrototype()
|
|
->children()
|
|
->scalarNode('ldap_value')->isRequired()->cannotBeEmpty()->end()
|
|
->scalarNode('role')->isRequired()->cannotBeEmpty()->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
return $v['activate'] && !\extension_loaded('ldap');
|
|
})
|
|
->thenInvalid('LDAP is activated, but the LDAP PHP extension is not loaded.')
|
|
->end()
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
return $v['activate'] && empty($v['user']['baseDn']);
|
|
})
|
|
->thenInvalid('The "ldap.user.baseDn" config must be set if LDAP is activated.')
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
|
|
private function getSamlNode(): ArrayNodeDefinition
|
|
{
|
|
$builder = new TreeBuilder('saml');
|
|
/** @var ArrayNodeDefinition $node */
|
|
$node = $builder->getRootNode();
|
|
|
|
$node
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('activate')
|
|
->defaultFalse()
|
|
->end()
|
|
->scalarNode('title')
|
|
->defaultValue('Login with SAML')
|
|
->end()
|
|
->scalarNode('provider')
|
|
// the "default" was only added, to prevent support requests by people who did not
|
|
// adjust their config between 1.x and 2.0
|
|
->defaultValue('default')
|
|
->end()
|
|
->arrayNode('roles')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->booleanNode('resetOnLogin')
|
|
->defaultTrue()
|
|
->end()
|
|
->scalarNode('attribute')
|
|
->defaultNull()
|
|
->end()
|
|
->arrayNode('mapping')
|
|
->defaultValue([])
|
|
->arrayPrototype()
|
|
->children()
|
|
->scalarNode('saml')->isRequired()->cannotBeEmpty()->end()
|
|
->scalarNode('kimai')->isRequired()->cannotBeEmpty()->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('mapping')
|
|
->defaultValue([])
|
|
->arrayPrototype()
|
|
->children()
|
|
->scalarNode('saml')->isRequired()->cannotBeEmpty()->end()
|
|
->scalarNode('kimai')->isRequired()->cannotBeEmpty()->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('connection')
|
|
->addDefaultsIfNotSet()
|
|
->children()
|
|
->scalarNode('baseurl')->end()
|
|
->booleanNode('strict')->end()
|
|
->booleanNode('debug')->end()
|
|
->arrayNode('idp')
|
|
->children()
|
|
->scalarNode('entityId')->end()
|
|
->scalarNode('x509cert')->end()
|
|
->arrayNode('singleSignOnService')
|
|
->children()
|
|
->scalarNode('url')->end()
|
|
->scalarNode('binding')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('singleLogoutService')
|
|
->children()
|
|
->scalarNode('url')->end()
|
|
->scalarNode('binding')->end()
|
|
->end()
|
|
->end()
|
|
->scalarNode('certFingerprint')->end()
|
|
->scalarNode('certFingerprintAlgorithm')->end()
|
|
->arrayNode('x509certMulti')
|
|
->children()
|
|
->arrayNode('signing')
|
|
->prototype('scalar')->end()
|
|
->end()
|
|
->arrayNode('encryption')
|
|
->prototype('scalar')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('sp')
|
|
->children()
|
|
->scalarNode('entityId')->end()
|
|
->scalarNode('NameIDFormat')->end()
|
|
->scalarNode('x509cert')->end()
|
|
->scalarNode('privateKey')->end()
|
|
->arrayNode('assertionConsumerService')
|
|
->children()
|
|
->scalarNode('url')->end()
|
|
->scalarNode('binding')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('attributeConsumingService')
|
|
->children()
|
|
->scalarNode('serviceName')->end()
|
|
->scalarNode('serviceDescription')->end()
|
|
->arrayNode('requestedAttributes')
|
|
->prototype('array')
|
|
->children()
|
|
->scalarNode('name')->end()
|
|
->booleanNode('isRequired')->defaultValue(false)->end()
|
|
->scalarNode('nameFormat')->end()
|
|
->scalarNode('friendlyName')->end()
|
|
->arrayNode('attributeValue')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('singleLogoutService')
|
|
->children()
|
|
->scalarNode('url')->end()
|
|
->scalarNode('binding')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('security')
|
|
->children()
|
|
->booleanNode('nameIdEncrypted')->end()
|
|
->booleanNode('authnRequestsSigned')->end()
|
|
->booleanNode('logoutRequestSigned')->end()
|
|
->booleanNode('logoutResponseSigned')->end()
|
|
->booleanNode('wantMessagesSigned')->end()
|
|
->booleanNode('wantAssertionsSigned')->end()
|
|
->booleanNode('wantAssertionsEncrypted')->end()
|
|
->booleanNode('wantNameId')->end()
|
|
->booleanNode('wantNameIdEncrypted')->end()
|
|
->variableNode('requestedAuthnContext')
|
|
->validate()
|
|
->ifTrue(function ($v) {
|
|
return !\is_bool($v) && !\is_array($v);
|
|
})
|
|
->thenInvalid('Must be an array or a bool.')
|
|
->end()
|
|
->end()
|
|
->booleanNode('signMetadata')->end()
|
|
->booleanNode('wantXMLValidation')->end()
|
|
->booleanNode('lowercaseUrlencoding')->end()
|
|
->scalarNode('signatureAlgorithm')->end()
|
|
->scalarNode('digestAlgorithm')->end()
|
|
->scalarNode('entityManagerName')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('contactPerson')
|
|
->children()
|
|
->arrayNode('technical')
|
|
->children()
|
|
->scalarNode('givenName')->end()
|
|
->scalarNode('emailAddress')->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('support')
|
|
->children()
|
|
->scalarNode('givenName')->end()
|
|
->scalarNode('emailAddress')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->arrayNode('organization')
|
|
->prototype('array')
|
|
->children()
|
|
->scalarNode('name')->end()
|
|
->scalarNode('displayname')->end()
|
|
->scalarNode('url')->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->end()
|
|
->validate()
|
|
->ifTrue(static function ($v) {
|
|
if (true !== $v['activate']) {
|
|
return false;
|
|
}
|
|
$found = false;
|
|
foreach ($v['mapping'] as $mapping) {
|
|
if ($mapping['kimai'] === 'email') {
|
|
$found = true;
|
|
}
|
|
}
|
|
|
|
return !$found;
|
|
})
|
|
->thenInvalid('You need to configure a SAML mapping for the email attribute.')
|
|
->end()
|
|
;
|
|
|
|
return $node;
|
|
}
|
|
}
|