security:
    # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
    password_hashers:
        Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
            algorithm: auto
            cost: 4 # Lowest possible value for bcrypt
            time_cost: 3 # Lowest possible value for argon
            memory_cost: 10 # Lowest possible value for argon
    # https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
    providers:
        users:
            entity:
                class: App\UserBundle\Entity\UserList
                property: 'username'
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        api:
            pattern: ^/api
            stateless: true
            provider: users
            # Disable OAuth2 authentication for tests
            # custom_authenticators:
            #     - league.oauth2_server.resource_server
        main:
            lazy: true
            provider: users
            form_login:
                check_path: /login
                login_path: /login
                success_handler: iga_user.authentication.handler.login_success_handler
                failure_handler: iga_user.authentication.handler.login_failure_handler
            logout:
                path: logout
