# security
security:
    encoders:
        BusinessBundle\Model\Acl\Customer\Customer : sha512
        Symfony\Component\Security\Core\User\User:
            algorithm: bcrypt
            cost: 12
    providers:
        fos_userbundle:
            id: fos_user.user_provider.username_email
        in_memory:
            memory:
                users:
                    drivingo:
                        password: $2y$12$zDuKEHhFCspCJ3V4UXpSm.cpaw4WYp8LK/dgAvG.v/RaxFCyuhvWm
                        roles: 'ROLE_APP_USER'
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        docs:
            pattern: ^/api/docs
            http_basic: true
        main:
            pattern: ^/
            form_login:
                provider: fos_userbundle
                csrf_token_generator: security.csrf.token_manager
                login_path: fos_user_security_login
                check_path: fos_user_security_check
            anonymous: true
            logout:
                path: fos_user_security_logout
                target: landing_index
            remember_me:
                secret: '%secret%'
                lifetime: 1209600 # 1 week in seconds
                path: /
                always_remember_me: true
    role_hierarchy:
            ROLE_APP_SUPER_ADMIN : ROLE_APP_ADMIN
            ROLE_APP_ADMIN : ROLE_APP_USER
            ROLE_APP_USER : ROLE_USER
            ROLE_USER : IS_AUTHENTICATED_ANONYMOUSLY
    access_control:
        - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/security, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/foo, role: ROLE_APP_USER }
        - { path: ^/bar, role: ROLE_APP_USER }
        - { path: ^/api, role: ROLE_APP_API }
        - { path: ^/, role: IS_AUTHENTICATED_ANONYMOUSLY }