security:
    firewalls:
        dev:
            pattern: ^/_trans(/|$)
            security: false
        api:
            http_basic: ~
            entry_point: surfnet_stepup_middleware_api.security.json_basic_auth_entry_point
            stateless:  true
        monitor:
            pattern: ^/(info|health)$
            security: false

    access_control:
        - { path: ^/management, roles: [ROLE_MANAGEMENT] } # can be expanded with hosts: or ip:
        - { roles: [ROLE_SS,ROLE_RA] }

    providers:
        in_memory:
            memory:
                users:
                    ss:
                        password: %selfservice_api_password%
                        roles: 'ROLE_SS'
                    ra:
                        password: %registration_authority_api_password%
                        roles: 'ROLE_RA'
                    management:
                        password: %management_password%
                        roles: 'ROLE_MANAGEMENT'

    encoders:
        Symfony\Component\Security\Core\User\User: plaintext

security:
    firewalls:
        dev:
            pattern: ^/_trans(/|$)
            security: false
        monitor:
            pattern: ^/(info|health)$
            security: false
        api:
            http_basic: ~
            entry_point: surfnet_stepup_middleware_api.security.json_basic_auth_entry_point
            stateless:  true

    access_control:
        - { path: ^/management, roles: [ROLE_MANAGEMENT] } # can be expanded with hosts: or ip:
        - { roles: [ROLE_SS,ROLE_RA] }

    providers:
        in_memory:
            memory:
                users:
                    ss:
                        password: %selfservice_api_password%
                        roles: 'ROLE_SS'
                    ra:
                        password: %registration_authority_api_password%
                        roles: 'ROLE_RA'
                    management:
                        password: %management_password%
                        roles: 'ROLE_MANAGEMENT'

    encoders:
        Symfony\Component\Security\Core\User\User: plaintext

Move monitor entry up in firewall config
Move monitor entry up in firewall config

The firewall security config is changed slightly. The monitor entry was
moved one level up to prevent it from being affected by the api entry.

In effect this change ensures the api authentication mechanism is not
triggered on the health and info endpoint.
