dudi/config/packages/security.yaml
Simon Kühn f4b1e81065 Extend remember-me lifetime to 48h
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-07 12:48:20 +02:00

45 lines
1.3 KiB
YAML

security:
password_hashers:
App\Entity\User:
algorithm: bcrypt
providers:
app_user_provider:
entity:
class: App\Entity\User
property: email
firewalls:
dev:
pattern: ^/(_profiler|_wdt|assets|build)/
security: false
main:
lazy: true
provider: app_user_provider
custom_authenticators:
- App\Security\JsonLoginAuthenticator
logout:
path: app_auth_logout
invalidate_session: true
remember_me:
secret: '%kernel.secret%'
lifetime: 172800
token_provider:
doctrine: true
access_control:
- { path: ^/api/login, roles: PUBLIC_ACCESS }
- { path: ^/api/logout, roles: PUBLIC_ACCESS }
- { path: ^/api/register, roles: PUBLIC_ACCESS }
- { path: ^/api/reset-request, roles: PUBLIC_ACCESS }
- { path: ^/api/reset-password, roles: PUBLIC_ACCESS }
- { path: ^/api/me, roles: PUBLIC_ACCESS }
- { path: ^/api, roles: ROLE_USER }
- { path: ^/, roles: PUBLIC_ACCESS }
when@test:
security:
password_hashers:
App\Entity\User:
algorithm: auto
cost: 4