WIP

config/packages/framework.yaml

@@ -3,7 +3,10 @@ framework:
     secret: '%env(APP_SECRET)%'
 
     # Note that the session will be started ONLY if you read or write from it.
-    session: true
+    session:
+        cookie_secure: auto
+        cookie_samesite: lax
+        cookie_httponly: true
 
     #esi: true
     #fragments: true

config/packages/lexik_jwt_authentication.yaml

@@ -1,4 +0,0 @@
-lexik_jwt_authentication:
-    secret_key: '%env(resolve:JWT_SECRET_KEY)%'
-    public_key: '%env(resolve:JWT_PUBLIC_KEY)%'
-    pass_phrase: '%env(JWT_PASSPHRASE)%'

config/packages/rate_limiter.yaml

@@ -4,3 +4,7 @@ framework:
             policy: sliding_window
             limit: 5
             interval: '1 minute'
+        login:
+            policy: sliding_window
+            limit: 5
+            interval: '1 minute'