Firewall specific HTTP methods

[cuevae]

I've found out that in the Symfony Security component you can restrict the firewall to be triggered upon a specific request (documentation).

In my case, for a certain endpoint of my API, I'd like the firewall to be triggered on a POST request but not on a GET request. Based on the documentation above I was planning to use something like the following when defining my security rules for Silex in a yaml file:

endpoint:
  pattern: ^/myendpoint/$
  methods: [GET]
  security: false
default:
  pattern: ^.*$
  oauth2: true

But, checking on how the SecurityServiceProvider will handle that config, I've realized that the methods entry will be ignored:

• No check for methods key (code)
• Request matcher built only with one param code when it could accept more code

Is this done for a particular reason or it's an oversight in Silex?
Could this behaviour be achieved in some other way?