natepage / symfony-security

dev-main 2026-10-19 08:58 UTC

Requires

• php: ^8.4
• firebase/php-jwt: ^7.0
• workos/workos-php: ^5.1

MIT

Published on Packagist.org on 2026-10-19 08:58 UTC

README

Simple and opinionated security utilities

WorkOS firewall

security:
    firewalls:
        ui:
            oauth_workos:
                api_key: '%env(OAUTH_WORKOS_API_KEY)%'
                client_id: '%env(OAUTH_WORKOS_CLIENT_ID)%'
                organisation_id: '%env(OAUTH_WORKOS_ORGANISATION_ID)%'
                logout_redirect_route: 'dashboard'
                provider: oauth_workos
                user_class: App\Entity\User

organisation_id scopes the firewall to one WorkOS organisation. It is passed when building the AuthKit authorisation URL, and the driver rejects any authentication whose response is for another organisation (or for none) with InvalidOrganisationException, on both the login callback and the token refresh. Leave it unset for a firewall that accepts every user of the WorkOS environment.