added API tokens, deprecate API passwords (#4637)

2024-04-05 23:51:16 +02:00
parent dd51c8dfba
commit afe0656502
60 changed files with 889 additions and 624 deletions
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -18,6 +18,8 @@ security:
            security: false

        api:
+            access_token:
+                token_handler: App\API\Authentication\AccessTokenHandler
            request_matcher: App\API\Authentication\ApiRequestMatcher
            user_checker: App\Security\UserChecker
            stateless: true
@@ -35,7 +37,6 @@ security:
            entry_point: form_login

            custom_authenticators:
-                - App\API\Authentication\SessionAuthenticator
                - App\Saml\SamlAuthenticator

            remember_me: