12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788 |
- security:
- acl: ~
- encoders:
- JMS\FooBundle\Entity\User1: plaintext
- JMS\FooBundle\Entity\User2:
- algorithm: sha1
- encode_as_base64: false
- iterations: 5
- JMS\FooBundle\Entity\User3:
- algorithm: md5
- JMS\FooBundle\Entity\User4:
- id: security.encoder.foo
- JMS\FooBundle\Entity\User5:
- algorithm: pbkdf2
- hash_algorithm: sha1
- encode_as_base64: false
- iterations: 5
- key_length: 30
- JMS\FooBundle\Entity\User6:
- algorithm: bcrypt
- cost: 15
- providers:
- default:
- memory:
- users:
- foo: { password: foo, roles: ROLE_USER }
- digest:
- memory:
- users:
- foo: { password: foo, roles: 'ROLE_USER, ROLE_ADMIN' }
- basic:
- memory:
- users:
- foo: { password: 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33, roles: ROLE_SUPER_ADMIN }
- bar: { password: 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33, roles: [ROLE_USER, ROLE_ADMIN] }
- service:
- id: user.manager
- chain:
- chain:
- providers: [service, basic]
- firewalls:
- simple: { pattern: /login, security: false }
- secure:
- stateless: true
- http_basic: true
- http_digest:
- secret: TheSecret
- form_login: true
- anonymous: true
- switch_user: true
- x509: true
- remote_user: true
- logout: true
- remember_me:
- secret: TheSecret
- user_checker: ~
- host:
- pattern: /test
- host: foo\.example\.org
- methods: [GET,POST]
- anonymous: true
- http_basic: true
- with_user_checker:
- anonymous: ~
- http_basic: ~
- user_checker: app.user_checker
- simple_auth:
- provider: default
- anonymous: ~
- simple_form: { authenticator: simple_authenticator }
- role_hierarchy:
- ROLE_ADMIN: ROLE_USER
- ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]
- ROLE_REMOTE: ROLE_USER,ROLE_ADMIN
- access_control:
- - { path: /blog/524, role: ROLE_USER, requires_channel: https, methods: [get, POST]}
- -
- path: /blog/.*
- role: IS_AUTHENTICATED_ANONYMOUSLY
- - { path: /blog/524, role: IS_AUTHENTICATED_ANONYMOUSLY, allow_if: "token.getUsername() matches '/^admin/'" }
|