I want to use api key or jwt in later, but for now I just want /api/doc to use @Security("is_granted('IS_AUTHENTICATED_FULLY')") I tried to run ./bin/console debug...

I want to use api key or jwt in later, but for now I just want /api/doc to use @Security("is_granted('IS_AUTHENTICATED_FULLY')") I tried to run ./bin/console debug...

Yes, Symfony's Security component is powerful. But... it's *also* complex. Can we have both? Power and flexibility with readable and expressive code?

We think so. That's why, in Symfony 5.1 & 5.2, the security component was rebuilt and *reimagined*. Complexity was stripped away, logic was centralized and intelligent hook points were added.

The result is a security system that can *do* more with code that you can understand.

In this talk, I'll introduce you to the new security component and show you how to activate and migrate to it (hint: it's simple!). We'll also dive into some of the new possibilities, like streamlined custom authenticators (bye Guard!), centralized "login throttling", magic login links, 2fa and more!

And since no security talk would be complete without API authentication, I'll give you a quick guide to how *you* should implement API auth and how that fits into the new system.

Let's go!