====== Configuration de la sécurité ======
Le fichier de configuration comporte quatre parties :
security:
encoders:
# ...
providers:
# ...
firewalls:
# ...
access_control:
# ...
===== Encoders =====
Spécifier l'algorithme d'encodage des mots de passe.
security:
encoders:
App\Entity\User:
algorithm: bcrypt
===== Providers =====
security:
providers:
users:
entity:
class: App\Entity\User
property: email
===== Firewalls =====
security:
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
main:
anonymous: lazy
provider: users
guard:
authenticators:
- App\Security\LoginFormAuthenticator
logout:
# route appelée pour se déconnecter
path: app_logout
# route de redirection après la déconnexion
target: accueil
===== Access Control =====
security:
access_control:
- { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/admin, roles: ROLE_ADMIN }