Challenge 1 / 1

Check out the following firewalls setup in security.yaml:

security:
    # ...
    firewalls:
        main_firewall:
            pattern: ^/api/
            # ...
            custom_authenticator: App\Security\MainApiAuthenticator

        products_firewall:
            pattern: ^/api/product
            # ...
            custom_authenticator: App\Security\ProductApiAuthenticator

If I make a request to /api/product, which authenticators will be executed?

Both authenticators will be executed because both firwalls match the current URL and will be activated.

Only MainApiAuthenticator will be executed because that one firewall matches first.

Only ProductApiAuthenticator will be executed because its firewall matches closer and will be executed first.

Rewatch the video