security.yml

security:
    encoders:
        App\Entity\User:
            algorithm: auto
    providers:
        chained_db_provider:
            chain:
                providers: [app_db_provider_username, app_db_provider_email]
        app_db_provider_username:
            entity:
                class: App\Entity\User
                property: username
        app_db_provider_email:
            entity:
                class: App\Entity\User
                property: email
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        utama:
            pattern: ^/
            anonymous: true
            stateless: false
            security: true
            provider: chained_db_provider
            form_login:
                check_path: security_login
                login_path: security_login
                csrf_token_generator: security.csrf.token_manager
                default_target_path: home
                always_use_default_target_path: true
                use_referer: true
                failure_path: security_login
                username_parameter: _username
                password_parameter: _password
                csrf_parameter: _csrf_token

            logout:
                path: security_logout
                target: security_login
    access_control:
        #- { path: ^/, roles: ROLE_USER }