site: '%rapsys_blog.title%'
#Edit replacement
edit:
- #field:
- #mail: false
- #password: false
- #pseudonym: false
- #slug: false
+ admin:
+ mail: true
+ slug: true
route:
index: 'root'
view:
headers:
X-Originating-IP: '%env(REMOTE_ADDR)%'
secret: '%env(APP_SECRET)%'
- #csrf_protection: true
+ csrf_protection: true
session:
enabled: true
handler_id: ~
#XXX: comment this key in config/security.yaml to prevent users_in_memory induced failures
#TODO: see https://symfony.com/doc/current/security/passwords.html (sodium ? + upgrade)
Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
- algorithm: 'bcrypt'
+ #Rapsys\BlogBundle\Entity\User:
+ algorithm: 'sodium'
migrate_from:
+ - 'bcrypt'
- 'plaintext'
# Set providers
# Password parameter
password_parameter: 'login[password]'
# Enable login csrf protection
- #TODO: enable in framework now that it works here ?
enable_csrf: false
# Csrf parameter
csrf_parameter: 'login[_token]'