prayno/casauth-bundle

Basic CAS (SSO) authenticator for Symfony 3 and 4

CasAuthBundle

Basic CAS (SSO) authenticator for Symfony 3 and 4, _(*1)

This bundle provides a -very- basic CAS (http://jasig.github.io/cas/4.1.x/index.html) authentication client for Symfony 3 and 4., _(*2)

Installation

Install the library via Composer by running the following command:, _(*3)

composer require prayno/casauth-bundle

Next, enable the bundle in your app/AppKernel.php file:, _(*4)

<?php
// app/AppKernel.php

public function registerBundles()
{
    $bundles = array(
        // ...
        new PRayno\CasAuthBundle\PRaynoCasAuthBundle(),
        // ...
    );
}

In config.yml (Symfony 3) or config/packages/p_rayno_cas_auth.yaml (create this file in Symfony 4), add these settings :, _(*5)

p_rayno_cas_auth:
    server_login_url: https://mycasserver/cas/
    server_validation_url: https://mycasserver/cas/serviceValidate
    server_logout_url: https://mycasserver/cas/logout
    xml_namespace: cas
    options:[] see http://docs.guzzlephp.org/en/latest/request-options.html

Note : the xml_namespace and options parameters are optionals, _(*6)

Modify your security.yml with the following values (the provider in the following settings should not be used as it's just a very basic example ; in production, create your own UserProvider and add its service name in providers:cas:id) : ```yaml security: providers: cas: id: prayno.cas_user_provider, _(*7)

firewalls:
    dev:
        pattern: ^/(_(profiler|wdt)|css|images|js)/
        security: false
    main:
        anonymous: ~
        logout: ~
        guard:
            authenticators:
                - prayno.cas_authenticator

access_control:
    - { path: ^/, roles: ROLE_USER }

```, <sub>(*8)</sub>

And voila ! Your secured route should redirect you to your CAS login page which should authenticate you., <sub>(*9)</sub>

CAS global logout option

If you want your users to logout from the remote CAS server when logging out from your app, you should apply the following settings :, <sub>(*10)</sub>

security.yaml:, <sub>(*11)</sub>

```yaml, <sub>(*12)</sub>

...

firewalls:
    # ...
    main:
      # ...
      logout:
        path: /logout
        success_handler: PRayno\CasAuthBundle\Event\LogoutSuccessHandler

```, <sub>(*13)</sub>

services.yaml, <sub>(*14)</sub>

```yaml, <sub>(*15)</sub>

...

services: # ... PRayno\CasAuthBundle\Event\LogoutSuccessHandler: arguments: $logoutUrl: "%cas_logout_url%" ```, <sub>(*16)</sub>

Of course, you must set a "cas_logout_url" parameter in your app (eg. https://my_remote_cas_server/logout), <sub>(*17)</sub>

Don't forget to define a /logout route in your app, <sub>(*18)</sub>