feat: Add OAuth2 security scheme

Author: matiasperrone

app/Http/Controllers/Apis/Protected/Main/OAuth2TagsApiController.php

@@ -15,7 +15,9 @@
  * limitations under the License.
  **/
 
+use App\Models\Foundation\Main\IGroup;
 use App\ModelSerializers\SerializerUtils;
+use App\Security\SummitScopes;
 use models\main\ITagRepository;
 use models\oauth2\IResourceServerContext;
 use Illuminate\Support\Facades\Validator;
@@ -64,8 +66,12 @@ public function __construct
         operationId: "getAllTags",
         summary: "Get all tags",
         description: "Returns a paginated list of tags. Allows ordering, filtering and pagination.",
-        security: [["oauth2_security_scope" => ["openid", "profile", "email"]]],
         tags: ["Tags"],
+        security: [['tags_oauth2' => [
+            SummitScopes::ReadAllSummitData,
+            SummitScopes::ReadSummitData,
+            SummitScopes::ReadTagsData,
+        ]]],
         parameters: [
             new OA\Parameter(
                 name: 'page',
@@ -146,6 +152,11 @@ function () {
         summary: "Get a specific tag",
         description: "Returns detailed information about a specific tag",
         tags: ["Tags"],
+        security: [['tags_oauth2' => [
+            SummitScopes::ReadAllSummitData,
+            SummitScopes::ReadSummitData,
+            SummitScopes::ReadTagsData,
+        ]]],
         parameters: [
             new OA\Parameter(
                 name: "id",
@@ -206,8 +217,18 @@ public function getTag($tag_id){
         operationId: "createTag",
         summary: "Create a new tag",
         description: "Creates a new tag",
-        security: [["oauth2_security_scope" => ["openid", "profile", "email"]]],
         tags: ["Tags"],
+        x: [
+            'authz_groups' => [
+                IGroup::SuperAdmins,
+                IGroup::Administrators,
+                IGroup::SummitAdministrators,
+            ]
+        ],
+        security: [['tags_oauth2' => [
+            SummitScopes::WriteSummitData,
+            SummitScopes::WriteTagsData,
+        ]]],
         requestBody: new OA\RequestBody(
             required: true,
             content: new OA\JsonContent(ref: "#/components/schemas/TagRequest")
@@ -259,8 +280,18 @@ public function addTag(){
         operationId: "updateTag",
         summary: "Update a tag",
         description: "Updates an existing tag",
-        security: [["oauth2_security_scope" => ["openid", "profile", "email"]]],
         tags: ["Tags"],
+        x: [
+            'authz_groups' => [
+                IGroup::SuperAdmins,
+                IGroup::Administrators,
+                IGroup::SummitAdministrators,
+            ]
+        ],
+        security: [['tags_oauth2' => [
+            SummitScopes::WriteSummitData,
+            SummitScopes::WriteTagsData,
+        ]]],
         parameters: [
             new OA\Parameter(
                 name: "id",
@@ -324,8 +355,18 @@ public function updateTag($tag_id){
         operationId: "deleteTag",
         summary: "Delete a tag",
         description: "Deletes a tag",
-        security: [["oauth2_security_scope" => ["openid", "profile", "email"]]],
         tags: ["Tags"],
+        x: [
+            'authz_groups' => [
+                IGroup::SuperAdmins,
+                IGroup::Administrators,
+                IGroup::SummitAdministrators,
+            ]
+        ],
+        security: [['tags_oauth2' => [
+            SummitScopes::WriteSummitData,
+            SummitScopes::WriteTagsData,
+        ]]],
         parameters: [
             new OA\Parameter(
                 name: "id",

app/Swagger/Security/TagsAuthSchema.php

@@ -0,0 +1,27 @@
+<?php
+namespace App\Swagger\Security;
+
+use App\Security\SummitScopes;
+use OpenApi\Attributes as OA;
+
+#[
+    OA\SecurityScheme(
+        type: 'oauth2',
+        securityScheme: 'tags_oauth2',
+        flows: [
+            new OA\Flow(
+                authorizationUrl: L5_SWAGGER_CONST_AUTH_URL,
+                tokenUrl: L5_SWAGGER_CONST_TOKEN_URL,
+                flow: 'authorizationCode',
+                scopes: [
+                    SummitScopes::ReadAllSummitData => 'Read All Summit Data',
+                    SummitScopes::ReadSummitData => 'Read Summit Data',
+                    SummitScopes::ReadTagsData => 'Read Tags Data',
+                    SummitScopes::WriteSummitData => 'Write Summit Data',
+                    SummitScopes::WriteTagsData => 'Write Tags Data',
+                ],
+            ),
+        ],
+    )
+]
+class TagsAuthSchema {}