What about a LexikJWTAuthenticatio bridge to allow credentials to be sent as JSON object (FOSRestBundle support it). See : https://github.com/lexik/LexikJWTAuthenticationBundle/issues/123#issuecomment-173860682