# To get started with security, check out the documentation:
# http://symfony.com/doc/current/book/security.html
security:



    # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
    providers:
        in_memory:
            memory:
                users:
                    admin:
                        password: $2y$12$7A7ucSLjvxfYGNbmY1cifOn3awqH9AKs3S6dLUIi4wAbvmqlJgv.u
                        roles: ['ROLE_ADMIN','ROLE_USER']
                    cedric:
                        password: cedric
                        roles: 'ROLE_USER'

    encoders:
        Symfony\Component\Security\Core\User\User:
            algorithm: bcrypt
            cost: 12

    #Firewall is authentication system. There's only one firewall that is active on one request.
    firewalls:
        # disables authentication for assets and the profiler, adapt it according to your needs
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        #No pattern key, so matches all requests.
        main:
            anonymous: ~
            guard:
                authenticators:
                    - app.security.login_form_authenticator

            remember_me:
                secret:   '%secret%'
                lifetime: 604800 # 1 week in seconds
                path:     /

            logout:
                path: /logout
            # activate different ways to authenticate

            # http_basic: ~
            # http://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate

            # form_login: ~
            # http://symfony.com/doc/current/cookbook/security/form_login_setup.html

    access_control:
        - { path: ^/login, roles:  IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/logout, roles:  IS_AUTHENTICATED_ANONYMOUSLY }
        # require ROLE_ADMIN for /admin*
        - { path: ^/, roles: ROLE_ADMIN }