lumoauth / symfony-bundle

v1.0.1 2026-10-08 17:25 UTC

Requires

• php: ^8.1
• lumoauth/lumoauth: ^1.0
• symfony/config: ^6.4 || ^7.0
• symfony/dependency-injection: ^6.4 || ^7.0
• symfony/http-kernel: ^6.4 || ^7.0
• symfony/security-http: ^6.4 || ^7.0

MIT

• symfony
• authorization
• oauth
• bundle
• auth
• lumoauth

Published on Packagist.org on 2026-10-08 17:29 UTC

README

composer require lumoauth/symfony-bundle

# config/packages/lumoauth.yaml
lumoauth:
    url: '%env(LUMOAUTH_URL)%'
    org_id: '%env(LUMOAUTH_ORG_ID)%'
    api_key: '%env(LUMOAUTH_API_KEY)%'

LumoAuth\LumoAuth is now autowirable:

public function __construct(private LumoAuth $lumo) {}

if (!$this->lumo->permissions->check('document.edit', userId: $user->getUserIdentifier())) {
    throw $this->createAccessDeniedException();
}

Authenticate API requests with LumoAuth bearer tokens through the security component's access_token authenticator; the badge carries the userinfo claims so your user provider needs no second call:

security:
    firewalls:
        api:
            pattern: ^/api
            stateless: true
            access_token:
                token_handler: LumoAuth\Symfony\Security\LumoAuthAccessTokenHandler