core

core copied to clipboard

New option: ```php #[ApiResource(strictQueryParameters: true) ``` Will test if query parameters are allowed on the resource, if a parameter is not allowed it'll send a 400. TODO: - [ ]...

soyuka

Access checks for a DTO created through a resolver should happen after it was created

1

**API Platform version(s) affected**: 3.3.6 **Description** When using ApiPlatform 3.2, a custom DTO created through an instance of `QueryItemResolverInterface` could run through the security checks **after** the DTO was created....

NicoHaase

Calling GraphQL DeleteMutation ignores serialization groups and causes error

3

**API Plaform**: v3.3 **Description**: Calling ``` mutation { deleteGreeting(input: {id: "/api/greetings/cd"}) { greeting { id _id name } clientMutationId } } ``` produces ``` "debugMessage": "Cannot return null for non-nullable...

danaki

feat(state): add security to parameters

1

| Q | A | ------------- | --- | Branch? | main | License | MIT This PR adds a security property to `Parameter`, and the corresponding state provider to...

emmanuel-averty

Filters incompatible with PHP 8.2.20 and 8.3.8

18

**API Platform version(s) affected**: 3.1, 3.2, 3.3 **Description** After CircleCI has released images for PHP patch versions 8.3.8 and 8.2.20 (today), we are seeing new errors on our test suite...

jamesisaac

Doctrine ODM Documents return inconsistent data for GET Collection and Item Operations in Symfony production environment

1

**API Platform version(s) affected**: 3.3.5 **Description** The `GET` Collection and Item operations do not always return the latest data for document resources after updating a resource via the `PATCH` or...

nasAtchia

Mixing REST and GraphQL operation names

3

API Platform version: 3,3 My resource description looks like so: ``` #[ApiResource( security: "is_granted('ROLE_USER')", order: ['id' => 'DESC'], normalizationContext: ['groups' => ["batch:query"]], denormalizationContext: ['groups' => ["batch:mutation"]], operations: [ new Get(),...

danaki

Remove hydra prefix

2

**Description** `hydra:member` => `member` + feature flag to not break

soyuka

| Q | A | ------------- | --- | Branch? | 3.3 | Tickets | N/A | License | MIT | Doc PR | N/A [This commit](https://github.com/api-platform/core/pull/4851/commits/0ad3439f4d4c91c0586abb14ab6d9c14d6c38ddf) added many `@noRector`...

ttskch

OpenAPI on calculated field add an extra `items` fields even if `openApiContext` define an object

3

**API Platform version(s) affected**: 3.2.22, 3.3.2 Tested on 3.2.22 and replicated on 3.3.2 **Description** On a calculated field that returns an `array`, if we add a `ApiProperty` to change the...

monitaurus