- Added support for authenticating via access tokens

- update symfony to 6.4.*
- some other minor stuff

config/packages/security.yaml

@@ -20,6 +20,7 @@ services:
             $globalFactory: '@limiter.ip_login'
             # localFactory is the limiter for username+IP
             $localFactory: '@limiter.username_ip_login'
+            $secret: '%env(APP_SECRET)%'
 
 security:
     # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
@@ -36,6 +37,14 @@ security:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
             security: false
+        api:
+            pattern: ^/api/
+            provider: app_user_provider
+            access_denied_handler: App\Security\AccessTokenDeniedHandler
+
+            access_token:
+                token_handler: App\Security\AccessTokenHandler
+                failure_handler: App\Security\AccessTokenDeniedHandler
         main:
             lazy: true
             provider: app_user_provider

config/packages/uid.yaml

@@ -0,0 +1,4 @@
+framework:
+    uid:
+        default_uuid_version: 7
+        time_based_uuid_version: 7

config/services.yaml

@@ -26,4 +26,9 @@ services:
         tags:
             - { name: doctrine.event_subscriber, connection: default }
         calls:
-            - [ setAnnotationReader, [ '@annotation_reader' ] ]
+            - [ setAnnotationReader, [ '@annotation_reader' ] ]
+
+    Symfony\Component\Uid\Command\GenerateUlidCommand: ~
+    Symfony\Component\Uid\Command\GenerateUuidCommand: ~
+    Symfony\Component\Uid\Command\InspectUlidCommand: ~
+    Symfony\Component\Uid\Command\InspectUuidCommand: ~