imports:
    - { resource: ./../config/framework.yml }

framework:
    http_method_override: false
    serializer: ~
    http_client:
        scoped_clients:
            oauth2.client:
                scope: 'https://authorization-server\.example\.com'
                headers:
                    Authorization: 'Basic Y2xpZW50OnBhc3N3b3Jk'

security:
    password_hashers:
        Symfony\Component\Security\Core\User\InMemoryUser: plaintext

    providers:
        in_memory:
            memory:
                users:
                    dunglas: { password: foo, roles: [ROLE_USER] }

    firewalls:
        main:
            pattern: ^/
            access_token:
                token_handler:
                    oauth2: ~
                token_extractors: 'header'
                realm: 'My API'

    access_control:
        - { path: ^/foo, roles: ROLE_USER }
