LSBC/config/packages/security.yaml

39 lines
1.3 KiB
YAML
Raw Normal View History

2023-05-05 21:48:32 +02:00
security:
# https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
password_hashers:
Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
# https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
providers:
app_user_provider:
entity:
class: App\Entity\User
property: email
2023-05-05 21:48:32 +02:00
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
main:
lazy: true
provider: app_user_provider
form_login:
login_path: app_login
check_path: app_login
enable_csrf: true
logout:
path: app_logout
target: app_index
role_hierarchy:
ROLE_ADMIN: ROLE_USER
2023-05-05 21:48:32 +02:00
access_control:
- { path: ^/admin, roles: ROLE_ADMIN }
- { path: ^/manage, roles: ROLE_USER }
2023-05-05 21:48:32 +02:00
when@test:
security:
password_hashers:
Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
algorithm: auto
cost: 4 # Lowest possible value for bcrypt
time_cost: 3 # Lowest possible value for argon
memory_cost: 10 # Lowest possible value for argon