feat: integrated OAuth2 server

config/packages/security.yaml

@@ -12,12 +12,14 @@ security:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
             security: false
+        api_token:
+            pattern: ^/token$
+            security: false
         api:
-            lazy: true
-            stateless: true
             pattern: ^/api
-            custom_authenticator:
-                - App\Security\ApiKeyAuthenticator
+            security: true
+            stateless: true
+            oauth2: true
         main:
             lazy: true
             provider: app_user_provider
@@ -30,7 +32,7 @@ security:
     # Easy way to control access for large sections of your site
     # Note: Only the *first* access control that matches will be used
     access_control:
-        - { path: ^/api, roles: ROLE_API }
+        - { path: ^/authorize, roles: IS_AUTHENTICATED_REMEMBERED }
 
 when@test:
     security: