resq/config/packages/security.yaml

72 lines
2 KiB
YAML

security:
# https://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
encoders:
App\Entity\User:
algorithm: bcrypt
cost: 12
providers:
user_provider:
entity:
class: App\Entity\User
property: username
api_key_user_provider:
id: Catalyst\APIBundle\Security\APIKeyUserProvider
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
login:
pattern: ^\/login$
methods: [GET]
security: false
tracker:
pattern: ^\/track\/
methods: [GET]
security: false
api:
pattern: ^\/api\/
security: false
sms:
pattern: ^/sms\/
security: false
rider_api:
pattern: ^\/rapi\/
security: false
warranty_api:
pattern: ^\/capi\/
stateless: true
simple_preauth:
authenticator: Catalyst\APIBundle\Security\APIKeyAuthenticator
provider: api_key_user_provider
user_checker: Catalyst\AuthBundle\Service\UserChecker
main:
provider: user_provider
form_login:
login_path: login
check_path: login
logout:
path: logout
target: /
remember_me:
secret: '%env(APP_SECRET)%'
lifetime: 604800
path: /
user_checker: Catalyst\AuthBundle\Service\UserChecker
# activate different ways to authenticate
# http_basic: ~
# https://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate
# form_login: ~
# https://symfony.com/doc/current/cookbook/security/form_login_setup.html
access_decision_manager:
strategy: unanimous