security: encoders: App\Entity\User: algorithm: bcrypt providers: app_user_provider: entity: class: App\Entity\User property: email firewalls: dev: pattern: ^/(_(profiler|wdt)|css|images|js)/ security: false main: anonymous: true lazy: true remember_me: secret: '%kernel.secret%' lifetime: 604800 # 1 week path: / secure: true guard: authenticators: - App\Security\LoginFormAuthenticator logout: path: app_security_logout target: app_site_index access_control: - { path: ^/sign-in$, roles: IS_AUTHENTICATED_ANONYMOUSLY } role_hierarchy: ROLE_ADMIN: ROLE_USER