Le fichier de configuration comporte quatre parties :

config/packages/security.yaml

security:

    encoders:
        # ...
        
    providers:
        # ...
        
    firewalls:
        # ...
        
    access_control:
        # ...
 

Spécifier l'algorithme d'encodage des mots de passe.

config/packages/security.yaml

security:

    encoders:
        App\Entity\User:
            algorithm: bcrypt
 

config/packages/security.yaml

security:

    providers:
        users:
            entity:
                class: App\Entity\User
                property: email
 

config/packages/security.yaml

security:
    
    firewalls:
        
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
            
        main:
            anonymous: lazy
            provider: users
            guard:
                authenticators:
                    - App\Security\LoginFormAuthenticator
            logout:
                # route appelée pour se déconnecter
                path: app_logout
                # route de redirection après la déconnexion
                target: accueil

config/packages/security.yaml

security:
    
    access_control:
        - { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin, roles: ROLE_ADMIN }