config.yml

imports:
    - { resource: parameters.yml }
    - { resource: security.yml }
framework:
    #esi:             ~
    #translator:      { fallback: %locale% }
    secret:          %secret%
    router:
        resource: "%kernel.root_dir%/config/routing.yml"
        strict_requirements: ~
    form:            ~
    csrf_protection: ~
    validation:      { enable_annotations: true }
    templating:
        engines: ['twig']
        #assets_version: SomeVersionScheme
    default_locale:  "%locale%"
    trusted_proxies: ~
    session:         ~
    fragments:       ~
    http_method_override: true

# Twig Configuration
twig:
    debug:            %kernel.debug%
    strict_variables: %kernel.debug%

# Assetic Configuration
assetic:
    debug:          %kernel.debug%
    use_controller: false
    node: %node_location%
    node_paths: %node_paths%
    #bundles:        [ ]
    #java: /usr/bin/java
    filters:
        cssrewrite: ~
        yui_css:
            jar: %kernel.root_dir%/Resources/java/yuicompressor-2.4.8.jar
        yui_js:
            jar: %kernel.root_dir%/Resources/java/yuicompressor-2.4.8.jar
        less:
            apply_to:   "\.less$"
            bin: %less_path%
        handlebars:
             apply_to: "\.handlebars$"
             bin: %handlebars_path%

# Doctrine Configuration
doctrine:
    dbal:
        driver:   %database_driver%
        host:     %database_host%
        port:     %database_port%
        dbname:   %database_name%
        user:     %database_user%
        password: %database_password%
        charset:  UTF8
    orm:
        auto_generate_proxy_classes: %kernel.debug%
        auto_mapping: true
        filters:
            softdeleteable:
                class: Gedmo\SoftDeleteable\Filter\SoftDeleteableFilter
                enabled: true
        mappings:
            gedmo_tree:
                type: annotation
                prefix: Gedmo\Tree\Entity
                dir: "%kernel.root_dir%/../vendor/gedmo/doctrine-extensions/lib/Gedmo/Tree/Entity"
                alias: GedmoTree
                is_bundle: false

# FOSRest Configuration
fos_rest:
    view:
        force_redirects:
            html: true
        formats:
            json: true
        templating_formats:
            html: true 
# FOSUser Configuration
fos_user:
    db_driver: orm # other valid values are 'mongodb', 'couchdb' and 'propel'
    firewall_name: secured_area
    user_class: Phoenix\CoreBundle\Entity\User\User
# Social Configuration
hwi_oauth:
    #this is my custom user provider, created from FOSUBUserProvider - will manage the 
    #automatic user registration on your site, with data from the provider (facebook. google, etc.)
    #and also, the connecting part (get the token and the user_id)
    connect:
        account_connector: my_user_provider
    # name of the firewall in which this bundle is active, this setting MUST be set
    firewall_name: secured_area
    fosub:
        username_iterations: 30
        properties:
            # these properties will be used/redefined later in the custom FOSUBUserProvider service.
            facebook: facebook_id
           # google: google_id
    resource_owners:
        facebook:
            type: facebook
            client_id: %facebook_client_id%
            client_secret: %facebook_client_secret%
            scope: email
            infos_url:     "https://graph.facebook.com/me?fields=username,name,email,picture.type(large)"
            paths:
                email:          email
                profilepicture: picture.data.url
            options:
                display: popup #dialog is optimized for popup window
services:
    # hwi_oauth.user.provider.entity:
    #     class: HWI\Bundle\OAuthBundle\Security\Core\User\OAuthUserProvider
    my_user_provider:
        class: Phoenix\FrontendBundle\Security\FOSUBUserProvider
        #this is the place where the properties are passed to the UserProvider - see config.yml
        arguments: [@fos_user.user_manager,{facebook: facebook_id}]

routing.yml

_liip_imagine:
    resource: "@LiipImagineBundle/Resources/config/routing.xml"

fos_js_routing:
    resource: "@FOSJsRoutingBundle/Resources/config/routing/routing.xml"

phoenix_backend:
    resource: "@PhoenixBackendBundle/Resources/config/routing.yml"
    prefix:   /admin

phoenix_frontend:
    resource: "@PhoenixFrontendBundle/Resources/config/routing.yml"
    prefix:   /

#FosUserBundle Routes
fos_user_security:
    resource: "@FOSUserBundle/Resources/config/routing/security.xml"
 
fos_user_profile:
    resource: "@FOSUserBundle/Resources/config/routing/profile.xml"
    prefix: /profile
 
fos_user_register:
    resource: "@FOSUserBundle/Resources/config/routing/registration.xml"
    prefix: /register
 
fos_user_resetting:
    resource: "@FOSUserBundle/Resources/config/routing/resetting.xml"
    prefix: /resetting
 
fos_user_change_password:
    resource: "@FOSUserBundle/Resources/config/routing/change_password.xml"
    prefix: /profile

#HWIOAuthBundle routes
hwi_oauth_security:
    resource: "@HWIOAuthBundle/Resources/config/routing/login.xml"
    prefix: /login
 
hwi_oauth_redirect:
    resource: "@HWIOAuthBundle/Resources/config/routing/redirect.xml"
    prefix:   /login

hwi_oauth_connect:
    resource: "@HWIOAuthBundle/Resources/config/routing/connect.xml"
    prefix:   /login

facebook_login:
    pattern: /login/check-facebook

security.yml

security:
    encoders:
        # Phoenix\CoreBundle\Entity\User\User:
        #     algorithm:        sha1
        #     encode_as_base64: false
        #     iterations:       1
        FOS\UserBundle\Model\UserInterface: sha512
    providers:
        users:
            id: phoenix.core.manager.user
        fos_userbundle:
            id: fos_user.user_provider.username_email
    firewalls:
        backend:
            pattern:    ^/admin
            anonymous: ~
            form_login:
                login_path:  /admin/login
                check_path:  /admin/login_check
                always_use_default_target_path: true
                default_target_path: /admin
            logout:
                path:   /admin/logout
                target: /admin/login?logout=true
        frontend:
            pattern:    ^/
            anonymous: ~
            form_login:
                csrf_provider: form.csrf_provider
                failure_path: /user/login
                login_path:  /user/login
                check_path:  /user/login_check
                success_handler: phoenix.frontend.security.authentication.success_handler
                failure_handler: phoenix.frontend.security.authentication.failure_handler
                always_use_default_target_path: false
            logout:
                path:   /user/logout
                target: /
            remember_me:
                key:      "%secret%"
                lifetime: 31536000
                path:     /
                domain:   ~
        secured_area: 
            pattern: ^/
            form_login:
                provider: users
                csrf_provider: form.csrf_provider
                login_path: /login
                check_path: /login_check
            anonymous: true
            oauth:
                resource_owners:
                   facebook:       "/login/check-facebook"
                login_path:     /login
                failure_path:   /login
                check_path:  /login_check
                #default_target_path: /
                #provider: users

                oauth_user_provider:
                    #this is my custom user provider, created from FOSUBUserProvider - will manage the
                    #automatic user registration on your site, with data from the provider (facebook. google, etc.)
                    service: my_user_provider
            remember_me:
                key: "%secret%"
                lifetime: 31536000 # 365 days in seconds
                path: /
                domain: ~ # Defaults to the current domain from $_SERVER
        login:
            pattern:  ^/login$
            security: false
 
            remember_me:
                key: "%secret%"
                lifetime: 31536000 # 365 days in seconds
                path: /
                domain: ~ # Defaults to the current domain from $_SERVER
  
    access_control:
        #Backendbundle
        - { path: ^/admin/(login|login_check)$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin, roles: ROLE_ADMIN }
        #Frontbundle
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/connect, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }