ApiToken Entity

Hi Ryan,
Thank you so much for your fantastic Tutorials!

I have two questions here about "Api Token".
1- Is there any specific reason why the relation between User and ApiToken Entities are "oneToMany" or Could it be also "oneToOne"?

2- By Following your other Tutorials, I have made a Database and Api Platform and also I have a React Native Mobile App with a login screen and an Api back-end! but, I don't know the flow of Authenticate the User from the app to the Api and in combination with retrieving a Token for Authorization! Can you please explain to me in details which steps to take?

Very well explained and it is interesting, thanks!

A question about the "make" command.
Can you generate entity that has configuration in YAML, instead of annotations?
If not, is there an easy way to convert your annotations to YAML configs?

Some questions about ApiToken entity:
1) Since all fields get their values at the constructor, shouldn't we remove the question nullable mark from the getters return type?
2) What are your thoughts about making $token the primary key? Or at least a unique key?

I am trying to work through this because I have a project that I need this for and I am just wondering if I am thinking about this correctly?

When I create a new user, I want to automatically create a token. So, I am using teh following Doctrine EventSubscriber and am wondering if there is a better way?

namespace App\Doctrine;

use App\Entity\ApiToken;
use App\Entity\User;
use Doctrine\ORM\Event\LifecycleEventArgs;
use Doctrine\Common\EventSubscriber;

class UserTokenSubscriber implements EventSubscriber
{
    /**
     * Returns an array of events this subscriber wants to listen to.
     *
     * @return string[]
     */
    public function getSubscribedEvents()
    {
        return ['prePersist', 'preUpdate'];
    }

    /**
     * @param LifecycleEventArgs $args
     *
     * @throws \Doctrine\ORM\ORMException
     */
    public function prePersist(LifecycleEventArgs $args) {
        $entity = $args->getEntity();

        if(!$entity instanceof User) {
            return;
        }

        if($entity->getApiTokens() && count($entity->getApiTokens()) == 0) {
            $token = new ApiToken($entity);

            $em = $args->getEntityManager();
            $em->persist($token);
        }
    }

    /**
     * @param LifecycleEventArgs $args
     * @throws \Doctrine\ORM\ORMException
     */
    public function preUpdate(LifecycleEventArgs $args) {
        $entity = $args->getEntity();

        if(!$entity instanceof User) {
            return;
        }

        if($entity->getApiTokens() && count($entity->getApiTokens()) == 0) {
            $token = new ApiToken($entity);

            $em = $args->getEntityManager();
            $em->persist($token);
        }
    }

}

And, for completeness, I added this to services.yaml:

    app.doctrine.hash_password_subscriber:
        class: App\Doctrine\HashPasswordSubscriber
        tags:
        - { name: doctrine.event_subscriber }

    app.doctrine.user_token_subscriber:
            class: App\Doctrine\UserTokenSubscriber
            tags:
            - { name: doctrine.event_subscriber }