MineSeeker/config/packages/security.yaml

security:
  password_hashers:
    App\Entity\User:
      algorithm: auto

  providers:
    app_user_provider:
      entity:
        class: App\Entity\User
        property: username

  firewalls:
    dev:
      pattern: ^/(_(profiler|wdt)|css|images|js)/
      security: false
    main:
      lazy: true
      provider: app_user_provider
      user_checker: App\Security\UserChecker
      form_login:
        login_path: MineSeekerBundle_login
        check_path: MineSeekerBundle_login
        default_target_path: MineSeekerBundle_homepage
        username_parameter: _username
        password_parameter: _password
        enable_csrf: true
      logout:
        path: MineSeekerBundle_logout
        target: MineSeekerBundle_homepage
      remember_me:
        secret: '%kernel.secret%'
        lifetime: 604800
        remember_me_parameter: _remember_me

  access_control:
    - { path: ^/api/webauthn/authentication/begin, roles: PUBLIC_ACCESS }
    - { path: ^/api/webauthn/authentication/complete, roles: PUBLIC_ACCESS }