groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-08-01 14:11:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added missing features

Browse source
This commit is contained in:
Jan Böhmer 2026-07-27 16:09:39 +02:00
parent 37108dbf56
commit fb2759a5b5
21 changed files with 1747 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
config/packages/security.yaml
View file

@ -75,6 +75,12 @@ security:
# authentication here (rather than relying on is_authenticated()) triggers Symfony's normal
# redirect-to-login-then-back flow for anonymous requests, same as the user settings pages.
- { path: ^/authorize, role: IS_AUTHENTICATED_FULLY }
# RFC 7591 Dynamic Client Registration (App\Controller\OAuth\ClientRegistrationController) is
# deliberately open/unauthenticated - see that class's docblock. Rate-limited, not access-controlled.
- { path: ^/oauth/register, role: PUBLIC_ACCESS }
# Note: RFC 8414/9728 discovery metadata under /.well-known/ needs no entry here - the "dev"
# firewall above already matches ^/\.well-known/ with security:false (fully public, no
# AccessListener at all), which is where those requests actually get handled.
# Restrict access to API to users, which has the API access permission
- { path: "^/api", allow_if: 'is_granted("@api.access_api") and is_authenticated()' }
# Restrict access to KICAD to users, which has API access permission