[tacman]

Q	A
Bug fix?	no
New feature?	yes
Deprecations?	no
Documentation?	yes
Issues
License	MIT

This adds symfony/ux-imagor-image, a URL provider for the self-hosted Imagor image server. An application serving /uploads/photo.jpg can keep that source path by configuring the image server and source origin separately:

UX_IMAGE_DSN=imagor://images.example.com?origin=https%3A%2F%2Fwww.example.com&sign_key=your-secret

The implementation is modeled on the existing imgix bridge: provider/factory structure, Composer packaging, PHPUnit tests and renderer snapshots. It uses the same conditional bundle registration and monorepo split conventions, with Imagor-specific URL construction and signing. It supports HTTP for local deployments (secure=false), custom ports, and reverse-proxy prefixes. When no origin is set, it also accepts loader/storage keys and absolute HTTP(S) sources. When origin is set, every source resolves under it. An absolute src cannot point the server at another host. The complete source is encoded before signing so source query strings and filenames cannot become processing instructions.

Width and height map to WIDTHxHEIGHT, cover to Imagor's centered crop, contain to fit-in, and quality/format to filters. A bounded set of image operations preserves filter order; boolean filters can be omitted with false. Common format and quality cannot be replaced through operations. PNG, JPEG, WebP and AVIF are advertised. Automatic format negotiation is not advertised because it requires server configuration; ux_picture() supplies explicit format alternatives.

Signed URLs use Imagor-compatible padded URL-safe Base64 HMAC, with SHA-1 (stock default), SHA-256 or SHA-512 and optional character truncation. The signing configuration must match the server. URLs without a key use unsafe, intended for development.

See the Imagor bridge README for configuration, signing, parameter mapping and supported operations.

Validation

• 49 bridge tests: source encoding, signing vectors cross-checked with Imagor v1.9.13's Go signer, invalid DSN options and filter injection, compiled-container registration/resolution, and six renderer snapshots.
• 219 existing UX Image tests.
• Live stock Imagor 1.9.13: cover, contain, width/height-only resizing, PNG/JPEG/WebP/AVIF, ordered rotate/crop, and rejection of a tampered signed URL.
• Composer strict validation, Symfony PHP code style on PHP 8.4, DOCtor-RST 1.78.0 with repository rules, and git diff --check.

The split mapping is included. Provisioning the split repository and a Symfony Flex recipe remains a maintainer follow-up.

[Kocal]

Thanks for the PR, Tac! I pushed a few changes:

• I rebased it on 3.x and squashed it into one commit.
• The bridge now requires symfony/ux-image ^3.7, because ux-image 3.6.0 does not register the imagor bridge.
• The CHANGELOG entry moved to 3.7.0.
• To match the IPX bridge, the DSN option scheme=http is now secure=false.
• The port now comes from Dsn::getPort().
• Validation now lives only in the factory. The provider no longer re-checks operation names and formats, because ImageUrlGenerator already does it.

I also changed one behavior: when origin is set, an absolute src no longer bypasses it.

Before, the app signed a URL to any host whenever src came from user data, such as an avatar URL. That meant the signature no longer protected the Imagor server.

Without origin, absolute URLs still pass through to the server as before.

[Kocal]

Thank you @tacman.

[Kocal]

Recipe : symfony/recipes#1624