Cablemodem/app/config/security.yml

imports:
    - { resource: roles.yml }

security:
    providers:
        oauth:
            id: base_oauth_bundle.oauth_user_provider

    firewalls:

        dev:
            context: ik_share
            stateless: false
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        api:
          context: ik_share
          pattern: ^/api
          stateless: false
          oauth_proxy: true

        secured_area:
            context: ik_share
            stateless: false
            pattern: ^/
            logout:
                path:   /logout
                target: /
                success_handler: base_admin.security.logout.handler
            anonymous: true
            access_denied_handler: kernel.handler.access_denied_handler
            # HWIOAuthBundle + BaseOAuthBundle Configuration
            oauth:
                login_path: /login
                failure_path: /login
                check_path: /login
                resource_owners:
                    login: /login_check
                oauth_user_provider:
                    service: base_oauth_bundle.oauth_user_provider

    access_control:
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin/, role: ROLE_ADMIN }
        - { path: ^/api, role: ROLE_USER }