core

core copied to clipboard

Allow throwing an access denied exception on denormalization of secured properties

1

Throw AccessDeniedException when security conditions for an operation or property aren't met on denormalize | Q | A | ------------- | --- | Branch? | main | Tickets | Closes...

dwgebler

| Q | A | ------------- | --- | Branch? | main | Tickets | | License | MIT | Doc PR | api-platform/docs#... The idea of this feature is...

loic425

| Q | A | ------------- | --- | Branch? | main | Tickets | Closes #7212

robjenman

| Q | A | ------------- | --- | Branch? | 4.0 | Tickets | - | License | MIT | Doc PR | - In reference to PR #7203...

Fylax

| Q | A | ------------- | --- | Branch? | main | Tickets | n/a | License | MIT | Doc PR | n/a I recently discovered stateOptions parameter...

fmata

[Laravel] Support for ExistsFilter

1

**Description** I would like to use the ExistsFilter in Laravel a Laravel project using the JSON:API format. Currently, the ExistsFilter is only implemented under [Doctrine ORM](https://github.com/api-platform/core/blob/main/src/Doctrine/Orm/Filter/ExistsFilter.php), but there is no...

cay89

[State] Suddenly removes standalone contracts packages and imports whole contracts package

2

`composer update api-platform/state`: ``` Loading composer repositories with package information Updating dependencies Lock file operations: 1 install, 1 update, 6 removals - Removing symfony/cache-contracts (v3.6.0) - Removing symfony/deprecation-contracts (v3.6.0) -...

norkunas

### Description This PR introduces the PropertySchemaCssColorRestriction class, which generates a regular expression (pattern) for validating CSS color values in API Platform property schemas, based on the Symfony CssColor constraint....

SebLevDev

chore: remove 3.4 deprecation

4

| Q | A | ------------- | --- | Branch? | 4.1 | Tickets | - | License | MIT | Doc PR | - This must be the last...

maxhelias

Allow config option to throw 403 when securityPostDenormalize fails for an API property

3

**Description** At the moment, when implementing `securityPostDenormalize` at the property level in a POST, PATCH or PUT request, if a field is in the request body for which the user...

dwgebler