Remplacement du role anonymous

config/packages/security.yaml

@@ -47,7 +47,7 @@ security:
     # Easy way to control access for large sections of your site
     # Note: Only the *first* access control that matches will be used
     access_control:
-        - { path: ^/(login$|register$|motdepasseoublie$|resetpassword/token=|activate/token=|fichefilm/|$|liste-by/|liste-by_real/|recherche) , roles: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/(login$|register$|motdepasseoublie$|resetpassword/token=|activate/token=|fichefilm/|$|liste-by/|liste-by_real/|recherche) , roles: PUBLIC_ACCESS }
         - { path: ^/admin, roles: ROLE_ADMIN }
         - { path: ^/genre, roles: ROLE_MODERATEUR }
         - { path: ^/, roles: IS_AUTHENTICATED_REMEMBERED }

src/Security/LoginFormAuthenticator.php

@@ -30,6 +30,20 @@ class LoginFormAuthenticator extends AbstractLoginFormAuthenticator
         $this->urlGenerator = $urlGenerator;
     }
 
+     /**
+     * Called on every request to decide if this authenticator should be
+     * used for the request.
+     *
+     * @param Request $request request
+     *
+     * @return boolean Returning false will cause this authenticator to be skipped.
+     */
+    public function supports(Request $request): bool
+    {
+        return self::LOGIN_ROUTE === $request->attributes->get('_route')
+            && $request->isMethod('POST');
+}
+
     public function authenticate(Request $request): PassportInterface
     {
         $username = $request->request->get('username', '');