diff --git a/symfony/security-bundle/7.3/config/packages/security.yaml b/symfony/security-bundle/7.3/config/packages/security.yaml new file mode 100644 index 000000000..1162c4051 --- /dev/null +++ b/symfony/security-bundle/7.3/config/packages/security.yaml @@ -0,0 +1,42 @@ +security: + # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords + password_hashers: + Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto' + + # https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider + providers: + users_in_memory: { memory: null } + + firewalls: + # Disable security for dev tools and static assets (only needed if access_control is broad): + dev: + # 'assets/' is for AssetMapper, 'build/' for Webpack Encore. + # (Note: no regex delimiters needed; Symfony adds `{}` automatically.) + pattern: ^/(_profiler|_wdt|assets|build)/ + security: false + main: + lazy: true + provider: users_in_memory + + # Activate different ways to authenticate: + # https://symfony.com/doc/current/security.html#the-firewall + + # https://symfony.com/doc/current/security/impersonating_user.html + # switch_user: true + + # Controls access to different sections of the application. + # Only the *first* matching rule is applied. + access_control: + # - { path: ^/admin, roles: ROLE_ADMIN } + # - { path: ^/profile, roles: ROLE_USER } + +when@test: + security: + password_hashers: + # Password hashers are resource-intensive by design to ensure security. + # In tests, it's safe to reduce their cost to improve performance. + Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: + algorithm: auto + cost: 4 # Lowest possible value for bcrypt + time_cost: 3 # Lowest possible value for argon + memory_cost: 10 # Lowest possible value for argon diff --git a/symfony/security-bundle/7.3/config/routes/security.yaml b/symfony/security-bundle/7.3/config/routes/security.yaml new file mode 100644 index 000000000..f853be15c --- /dev/null +++ b/symfony/security-bundle/7.3/config/routes/security.yaml @@ -0,0 +1,3 @@ +_security_logout: + resource: security.route_loader.logout + type: service diff --git a/symfony/security-bundle/7.3/manifest.json b/symfony/security-bundle/7.3/manifest.json new file mode 100644 index 000000000..4a48e0cf2 --- /dev/null +++ b/symfony/security-bundle/7.3/manifest.json @@ -0,0 +1,12 @@ +{ + "bundles": { + "Symfony\\Bundle\\SecurityBundle\\SecurityBundle": ["all"] + }, + "copy-from-recipe": { + "config/": "%CONFIG_DIR%/" + }, + "aliases": ["security"], + "conflict": { + "symfony/framework-bundle": "<5.3" + } +}