SuiteCRM/SuiteCRM-Core
2
0
Fork 0
mirror of https://github.com/SuiteCRM/SuiteCRM-Core.git synced 2025-08-29 17:46:02 +08:00
Code Issues Projects Packages Activity Actions

Add logged-out backend route

Browse source
This commit is contained in:
Clemente Raposo 2022-09-16 17:19:20 +01:00
parent e853c1088f
commit 4fd29a4e95
2 changed files with 44 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

20
config/packages/security.php
View file

@ -61,6 +61,7 @@ return static function (ContainerConfigurator $containerConfig) {
['path' => '^/login$', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/session-status$', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/logout$', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/logged-out', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/$', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/api', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/api/graphql', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
@ -182,7 +183,7 @@ return static function (ContainerConfigurator $containerConfig) {
$samlMainFirewallConfig = [
'context' => 'app_context',
'pattern' => '^/(?!auth)',
'pattern' => '^/(?!auth|logged-out)',
'saml' => [
'provider' => 'app_user_provider',
// Match SAML attribute 'uid' with username.
@ -235,6 +236,22 @@ return static function (ContainerConfigurator $containerConfig) {
'path' => 'native_auth_logout'
]
],
'logged-out' => [
'context' => 'app_context',
'pattern' => '^/logged-out',
'lazy' => true,
'provider' => 'app_user_provider',
'json_login' => [
'provider' => 'app_user_provider',
'check_path' => 'native_auth_login',
],
'login_throttling' => [
'max_attempts' => $maxAttempts,
],
'logout' => [
'path' => 'native_auth_logout'
]
],
]),
'access_control' => [
['path' => '^/login$', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
@ -244,6 +261,7 @@ return static function (ContainerConfigurator $containerConfig) {
['path' => '^/saml/metadata', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/saml/acs', 'roles' => 'ROLE_USER'],
['path' => '^/saml/logout', 'roles' => 'ROLE_USER'],
['path' => '^/logged-out', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/auth', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/auth/login', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],
['path' => '^/auth/session-status', 'roles' => 'IS_AUTHENTICATED_ANONYMOUSLY'],

25
core/backend/Engine/Controller/IndexController.php
View file

@ -33,6 +33,7 @@ use App\Authentication\LegacyHandler\UserHandler;
use RuntimeException;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\Session\Session;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Component\Security\Core\Security;
@ -122,4 +123,28 @@ class IndexController extends AbstractController
return $response;
}
/**
* @Route("/logged-out", name="logged-out", methods={"GET"})
* @param Session $session
* @return Response
*/
public function loggedOut(Session $session): Response
{
$indexHtmlPath = $this->projectDir . self::INDEX_HTML_PATH;
if (!is_file($indexHtmlPath)) {
throw new RuntimeException('Please run ng build from terminal');
}
$response = new Response(file_get_contents($indexHtmlPath));
$this->get('security.token_storage')->setToken(null);
$session->clear();
$response->headers->clearCookie('XSRF-TOKEN');
$this->authentication->logout();
return $response;
}
}