chg: usr: add modern Webauthn authentication #4

config/bundles.php

@@ -11,4 +11,6 @@ return [
     Symfony\Bundle\MonologBundle\MonologBundle::class => ['all' => true],
     Symfony\Bundle\MercureBundle\MercureBundle::class => ['all' => true],
     Pentatrion\ViteBundle\PentatrionViteBundle::class => ['all' => true],
+    Webauthn\Bundle\WebauthnBundle::class => ['all' => true],
+    Webauthn\Stimulus\WebauthnStimulusBundle::class => ['all' => true],
 ];

config/packages/security.yaml

@@ -33,3 +33,5 @@ security:
         remember_me_parameter: _remember_me
 
   access_control:
+    - { path: ^/api/webauthn/authentication/begin, roles: PUBLIC_ACCESS }
+    - { path: ^/api/webauthn/authentication/complete, roles: PUBLIC_ACCESS }