PHP code example of careerum / laravel-keycloak-web-guard

    
        
<?php
require_once('vendor/autoload.php');

/* Start to develop here. Best regards https://php-download.com/ */

    

careerum / laravel-keycloak-web-guard example snippets

'redirect_url' => '/admin',

'routes' => [
    'login' => 'login',
    'logout' => 'logout',
    'callback' => 'callback',
]

'guards' => [
    'web' => [
        'driver' => 'keycloak-web',
        'provider' => 'users',
    ],

    // ...
],

'providers' => [
    'users' => [
        'driver' => 'keycloak-users',
        'model' => App\User::class,
        'modelSearchField' => 'kc_id',  // field in User model for searching
        'keyCloakSearchField' => 'sub',
        'userCreator' => App\Keycloak\UserCreator::class,  // class should implement Careerum\KeycloakWebGuard\Contracts\CreateUserInterface
        'syncUser' => App\Keycloak\SyncUser::class,  // class should implement Careerum\KeycloakWebGuard\Contracts\SyncUserInterface
    ],

    // ...
]

if (Gate::denies('keycloak-web', 'manage-account')) {
  return abort(403);
}

if (Gate::denies('keycloak-web', ['manage-account'])) {
  return abort(403);
}

if (Gate::denies('keycloak-web', 'manage-account', 'another-resource')) {
  return abort(403);
}

$this->middleware('keycloak-web-can:manage-something-cool');

// For multiple roles, separate with '|'
$this->middleware('keycloak-web-can:manage-something-cool|manage-something-nice|manage-my-application');

// On RouteServiceProvider.php for example

Route::prefix('admin')
  ->middleware('keycloak-web')
  ->namespace($this->namespace)
  ->group(base_path('routes/web.php'));

// Or with Route facade in another place

Route::group(['middleware' => 'keycloak-web'], function () {
    Route::get('/admin', 'Controller@admin');
});

// On your EncryptCookies middleware

class EncryptCookies extends Middleware
{
    protected $except = [];

    public function __construct(EncrypterContract $encrypter)
    {
        parent::__construct($encrypter);

        /**
         * This will disable in runtime.
         *
         * If you have a "session.cookie" option or don't care about changing the app name
         * (in another environment, for example), you can only add it to "$except" array on top
         */
        $this->disableFor(config('session.cookie'));
    }
}

php artisan vendor:publish  --provider="Careerum\KeycloakWebGuard\KeycloakWebGuardServiceProvider"