added support for saml login (#1408)

config/packages/security.yaml

@@ -5,11 +5,11 @@ security:
     providers:
         chain_provider:
             chain:
-                providers: [fos_userbundle]
+                providers: [kimai_internal]
         kimai_ldap:
             id: App\Ldap\LdapUserProvider
-        fos_userbundle:
-            id: fos_user.user_provider.username_email
+        kimai_internal:
+            id: App\Security\DoctrineUserProvider
 
     firewalls:
         dev:
@@ -54,6 +54,8 @@ security:
         ROLE_SUPER_ADMIN: ROLE_ADMIN
 
     access_control:
+        - { path: '^/auth/saml/login', roles: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: '^/auth/saml/metadata', roles: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: '^/(%app_locales%)$', role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: '^/(%app_locales%)/login', role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: '^/(%app_locales%)/register', role: IS_AUTHENTICATED_ANONYMOUSLY }

config/services-saml.yaml

@@ -0,0 +1,32 @@
+
+services:
+
+    # ================================================================================
+    # SAML
+    # ================================================================================
+
+    App\Saml\SamlAuth:
+        alias: onelogin_auth
+
+    OneLogin\Saml2\Auth:
+        alias: onelogin_auth
+
+    onelogin_auth:
+        class: App\Saml\SamlAuth
+        arguments: ['@request_stack', '%kimai.saml.connection%']
+
+    App\Saml\User\SamlUserFactory:
+        arguments: ['%kimai.saml%']
+
+    kimai.saml_listener:
+        class: Hslavich\OneloginSamlBundle\Security\Firewall\SamlListener
+        parent: security.authentication.listener.abstract
+        abstract: true
+        calls:
+            - [setOneLoginAuth, ["@onelogin_auth"]]
+
+    App\Saml\Provider\SamlProvider:
+        arguments: ['@App\Repository\UserRepository', '', '@App\Saml\SamlTokenFactory', '@App\Saml\User\SamlUserFactory']
+
+    App\Saml\Security\SamlAuthenticationSuccessHandler:
+        parent: security.authentication.success_handler

config/services.yaml

@@ -146,8 +146,7 @@ services:
     # LDAP
     # ================================================================================
 
-    kimai_ldap.security.authentication.provider:
-        class: App\Ldap\LdapAuthenticationProvider
+    App\Ldap\LdapAuthenticationProvider:
         arguments: ['@App\Security\UserChecker', '', '', '', '@App\Configuration\LdapConfiguration', '%security.authentication.hide_user_not_found%']
 
     # ================================================================================