security:
    password_hashers:
        Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
    providers:
        app_user_provider:
            entity:
                class: App\Entity\User
                property: uuid
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            pattern: ^/api/
            lazy: true
            provider: app_user_provider
            json_login:
               check_path: app_user_login
               username_path: username
               password_path: password
            login_throttling: null
            logout:
               path: /logout

namespace App\Controller;

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\Routing\Attribute\Route;
use Psr\Log\LoggerInterface;
use App\Entity\User;
use Symfony\Component\Security\Http\Attribute\CurrentUser;


final class AppUserLoginController extends AbstractController
{
    #[Route('/user/login', name: 'app_user_login', methods: ['POST'])]
    public function index(#[CurrentUser] ?User $user, LoggerInterface $logger): Response
    {

      if (null === $user) {
        $output = array(
            'Status' => 'ERROR',
            'Message' => 'Missing Credentials',
        );
        $logger->error(implode($output));
        $response = new JsonResponse($output, 401);
      } else {

        $token = rtrim(strtr(base64_encode(random_bytes(32)), '+/', '-_'), '=');

        $output = array(
            'Status' => 'SUCCESS',
            'Message' => 'Welcome' . $user->getUserIdentifier(),
            'user' => $user->getUserIdentifier(),  //making it easy for the UI to extract the user info
            'token' => $token,
        );
        $logger->error(implode($output));  //USed only during dev to help in debugging
        $response = new JsonResponse($output, 200);
      }

      return $response;
    }
}

               username_path: username
               password_path: password

        app_user_provider:
            entity:
                class: App\Entity\User
                property: uuid

            json_login:
               check_path: app_user_login