Merge branch '4.4' into 5.0

* 4.4:
  [Security] use lazy anonymous

Author: javiereguiluz

security/form_login.rst

@@ -28,7 +28,7 @@ First, enable ``form_login`` under your firewall:
 
             firewalls:
                 main:
-                    anonymous: ~
+                    anonymous: lazy
                     form_login:
                         login_path: login
                         check_path: login

security/guard_authentication.rst

@@ -186,7 +186,7 @@ Finally, configure your ``firewalls`` key in ``security.yaml`` to use this authe
                 # ...
 
                 main:
-                    anonymous: ~
+                    anonymous: lazy
                     logout: ~
 
                     guard:
@@ -213,7 +213,7 @@ Finally, configure your ``firewalls`` key in ``security.yaml`` to use this authe
                 <!-- if you want, disable storing the user in the session
                     add 'stateless="true"' to the firewall -->
                 <firewall name="main" pattern="^/">
-                    <anonymous/>
+                    <anonymous lazy="true"/>
                     <logout/>
 
                     <guard>
@@ -236,7 +236,7 @@ Finally, configure your ``firewalls`` key in ``security.yaml`` to use this authe
             'firewalls' => [
                 'main'       => [
                     'pattern'        => '^/',
-                    'anonymous'      => true,
+                    'anonymous'      => 'lazy',
                     'logout'         => true,
                     'guard'          => [
                         'authenticators'  => [

security/json_login_setup.rst

@@ -17,7 +17,7 @@ First, enable the JSON login under your firewall:
 
             firewalls:
                 main:
-                    anonymous: ~
+                    anonymous: lazy
                     json_login:
                         check_path: /login
 
@@ -33,7 +33,7 @@ First, enable the JSON login under your firewall:
 
             <config>
                 <firewall name="main">
-                    <anonymous/>
+                    <anonymous lazy="true"/>
                     <json-login check-path="/login"/>
                 </firewall>
             </config>
@@ -45,7 +45,7 @@ First, enable the JSON login under your firewall:
         $container->loadFromExtension('security', [
             'firewalls' => [
                 'main' => [
-                    'anonymous'  => null,
+                    'anonymous'  => 'lazy',
                     'json_login' => [
                         'check_path' => '/login',
                     ],
@@ -163,7 +163,7 @@ The security configuration should be:
 
             firewalls:
                 main:
-                    anonymous: ~
+                    anonymous: lazy
                     json_login:
                         check_path:    login
                         username_path: security.credentials.login
@@ -181,7 +181,7 @@ The security configuration should be:
 
             <config>
                 <firewall name="main">
-                    <anonymous/>
+                    <anonymous lazy="true"/>
                     <json-login check-path="login"
                         username-path="security.credentials.login"
                         password-path="security.credentials.password"/>
@@ -195,7 +195,7 @@ The security configuration should be:
         $container->loadFromExtension('security', [
             'firewalls' => [
                 'main' => [
-                    'anonymous'  => null,
+                    'anonymous'  => 'lazy',
                     'json_login' => [
                         'check_path' => 'login',
                         'username_path' => 'security.credentials.login',

security/multiple_guard_authenticators.rst

@@ -27,7 +27,7 @@ This is how your security configuration can look in action:
             # ...
             firewalls:
                 default:
-                    anonymous: ~
+                    anonymous: lazy
                     guard:
                         authenticators:
                             - App\Security\LoginFormAuthenticator
@@ -47,7 +47,7 @@ This is how your security configuration can look in action:
             <config>
                 <!-- ... -->
                 <firewall name="default">
-                    <anonymous/>
+                    <anonymous lazy="true"/>
                     <guard entry-point="App\Security\LoginFormAuthenticator">
                         <authenticator>App\Security\LoginFormAuthenticator</authenticator>
                         <authenticator>App\Security\FacebookConnectAuthenticator</authenticator>
@@ -66,7 +66,7 @@ This is how your security configuration can look in action:
             // ...
             'firewalls' => [
                 'default' => [
-                    'anonymous' => null,
+                    'anonymous' => 'lazy',
                     'guard' => [
                         'entry_point' => LoginFormAuthenticator::class,
                         'authenticators' => [
@@ -103,7 +103,7 @@ the solution is to split the configuration into two separate firewalls:
                         authenticators:
                             - App\Security\ApiTokenAuthenticator
                 default:
-                    anonymous: ~
+                    anonymous: lazy
                     guard:
                         authenticators:
                             - App\Security\LoginFormAuthenticator
@@ -130,7 +130,7 @@ the solution is to split the configuration into two separate firewalls:
                     </guard>
                 </firewall>
                 <firewall name="default">
-                    <anonymous/>
+                    <anonymous lazy="true"/>
                     <guard>
                         <authenticator>App\Security\LoginFormAuthenticator</authenticator>
                     </guard>
@@ -159,7 +159,7 @@ the solution is to split the configuration into two separate firewalls:
                     ],
                 ],
                 'default' => [
-                    'anonymous' => null,
+                    'anonymous' => 'lazy',
                     'guard' => [
                         'authenticators' => [
                             LoginFormAuthenticator::class,