feat: api endpoints

config/packages/security.yaml

@@ -10,6 +10,12 @@ security:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
             security: false
+        api:
+            lazy: true
+            stateless: true
+            pattern: ^/api
+            custom_authenticator:
+                - App\Security\ApiKeyAuthenticator
         main:
             lazy: true
             provider: bpn_user_provider
@@ -27,8 +33,7 @@ security:
     # Easy way to control access for large sections of your site
     # Note: Only the *first* access control that matches will be used
     access_control:
-        # - { path: ^/admin, roles: ROLE_ADMIN }
-        # - { path: ^/profile, roles: ROLE_USER }
+        - { path: ^/api, roles: ROLE_API }
 
 when@test:
     security: