security - Symfony JWT Bundle and form authentication -
when configuring lexikjwtauthenticationbundle need set security.yml these settings:
security: # ... firewalls: login: pattern: ^/api/login stateless: true anonymous: true form_login: # <-- question check_path: /api/login_check success_handler: lexik_jwt_authentication.handler.authentication_success failure_handler: lexik_jwt_authentication.handler.authentication_failure require_previous_session: false api: pattern: ^/api stateless: true guard: authenticators: - lexik_jwt_authentication.jwt_token_authenticator access_control: - { path: ^/api/login, roles: is_authenticated_anonymously } - { path: ^/api, roles: is_authenticated_fully } there no reference database or user class. how bundle know how authenticate user when making request?
curl -x post http://localhost:8000/api/login_check -d _username=johndoe -d _password=test
i looked bundle's source code couldn't find reference _username. symfony built-in security system?
Comments
Post a Comment