# config/packages/api_platform.yaml
api_platform:
    swagger:
        api_keys:
            - { name: 'Authorization', type: 'header' }
    mapping:
        paths: ['%kernel.project_dir%/src/Entity']

# config/packages/security.yaml
security:
    encoders:
        AppEntityUser:
            algorithm: bcrypt

    providers:
        db_provider:
            entity:
                class: AppEntityUser
                property: username
    firewalls:
        login:
            pattern:  ^/api/login
            stateless: true
            anonymous: true
            provider: db_provider
            form_login:
                check_path: /api/login_check
                username_parameter: _username
                password_parameter: _password
                success_handler: lexik_jwt_authentication.handler.authentication_success
                failure_handler: lexik_jwt_authentication.handler.authentication_failure
                require_previous_session: false

        main:
            pattern:   ^/api
            provider: db_provider
            stateless: true
            anonymous: true
            lexik_jwt: ~

        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false


    access_control:
        - { path: ^/api/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/api,       roles: IS_AUTHENTICATED_FULLY }