chore(config): ajuster docker, cors et securite

config/packages/security.yaml

@@ -29,10 +29,17 @@ security:
                 success_handler: lexik_jwt_authentication.handler.authentication_success
                 failure_handler: lexik_jwt_authentication.handler.authentication_failure
 
+        session_profile:
+            pattern: ^/api/session
+            stateless: false
+
+        session_api:
+            pattern: ^/api/(sites|machines|documents|profiles)
+            stateless: false
+
         api:
             pattern: ^/api
-            stateless: true
-            jwt: ~
+            stateless: false
 
         main:
             lazy: true
@@ -40,7 +47,9 @@ security:
 
     # Note: Only the *first* matching rule is applied
     access_control:
-        - { path: ^/api/login, roles: PUBLIC_ACCESS }
+        - { path: ^/api/session/profile, roles: PUBLIC_ACCESS }
+        - { path: ^/api/session/profiles, roles: PUBLIC_ACCESS }
+        - { path: ^/api, roles: PUBLIC_ACCESS }
         - { path: ^/api/docs, roles: PUBLIC_ACCESS }
         - { path: ^/api/test, roles: PUBLIC_ACCESS }
         - { path: ^/docs, roles: PUBLIC_ACCESS }