part3

.gitignore

@@ -9,3 +9,4 @@
 /vendor/
 /bin/
 /composer.phar
+/composer.lock

app/config/config.yml

@@ -94,6 +94,8 @@ fos_rest:
     access_denied_listener:
         json: true
     body_listener: true
+    disable_csrf_role: ROLE_API
+
 
 nelmio_api_doc:
     name: Page API

app/config/security.yml

@@ -10,8 +10,8 @@ security:
         in_memory:
             memory:
                 users:
-                    user:  { password: userpass, roles: [ 'ROLE_USER' ] }
-                    admin: { password: adminpass, roles: [ 'ROLE_ADMIN' ] }
+                    user:  { password: userpass, roles: [ 'ROLE_USER', 'ROLE_API' ] }
+                    admin: { password: adminpass, roles: [ 'ROLE_ADMIN', 'ROLE_API' ] }
 
     firewalls:
         dev:
@@ -23,17 +23,7 @@ security:
             security: false
 
         secured_area:
-            pattern:    ^/demo/secured/
-            form_login:
-                check_path: _security_check
-                login_path: _demo_login
-            logout:
-                path:   _demo_logout
-                target: _demo
-            #anonymous: ~
-            #http_basic:
-            #    realm: "Secured Demo Area"
-
-    access_control:
-        - { path: ^/demo/secured/hello/admin/, roles: ROLE_ADMIN }
-        #- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }
+            pattern:    ^/api
+            anonymous: ~
+            http_basic:
+                realm: "You should have a user name and password"

composer.json

@@ -19,7 +19,7 @@
         "sensio/framework-extra-bundle": "2.3.*",
         "sensio/generator-bundle": "2.3.*",
         "incenteev/composer-parameter-handler": "~2.0",
-        "friendsofsymfony/rest-bundle": "@dev",
+        "friendsofsymfony/rest-bundle": "~1.1",
         "jms/serializer-bundle": "@dev",
         "willdurand/rest-extra-bundle": "@dev",
         "nelmio/api-doc-bundle": "@dev"