- Added support for authenticating via access tokens

- update symfony to 6.4.*
- some other minor stuff

config/packages/security.yaml

@@ -20,6 +20,7 @@ services:
             $globalFactory: '@limiter.ip_login'
             # localFactory is the limiter for username+IP
             $localFactory: '@limiter.username_ip_login'
+            $secret: '%env(APP_SECRET)%'
 
 security:
     # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
@@ -36,6 +37,14 @@ security:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
             security: false
+        api:
+            pattern: ^/api/
+            provider: app_user_provider
+            access_denied_handler: App\Security\AccessTokenDeniedHandler
+
+            access_token:
+                token_handler: App\Security\AccessTokenHandler
+                failure_handler: App\Security\AccessTokenDeniedHandler
         main:
             lazy: true
             provider: app_user_provider

config/packages/uid.yaml

@@ -0,0 +1,4 @@
+framework:
+    uid:
+        default_uuid_version: 7
+        time_based_uuid_version: 7