API Platform 3 Part 2: Security for your Treasures
Category: Tutorials
- views: 78
- date: 12 April 2024
- posted by: mitsumi
API Platform 3 Part 2: Security for your Treasures
Ryan Weaver | Duration: 3:43 h | Video: H264 1920x1080 | Audio: AAC 48 kHz 2ch | 1,30 GB | Language: English
Here be dragons! We've built a pretty sweet API for storing dragon treasures... but we've completely neglected one minor detail: security! In this tutorial, we'll secure our API Platform-powered API in every way imaginable... and spin up a nifty test suite along the way
• Disabling documentation on production
• Different types of API authentication
• Logging in via Ajax & sessions
• Creating an API Token system with "scopes"
• Securing your API resources
• Bootstrapping tests with zenstruck/browser & zenstruck/foundry!
• How to use PATCH
• Adding security & securityPostDenormalize to operations & using object
• Voters
• Conditional fields based on permissions: #[ApiProperty(security: 'is_granted(...)')]
• Using a "state processor" to hash user passwords
• Dynamic serialization groups with a ContextBuilder
• Completely dynamic fields by decorating the normalizer
• Preventing "not allowed" data with validation
• Automatically set the "owner" of an object on create
• Auto-filter collections with "query extensions"
Sheesh! Let's go!
Homepage:
https://symfonycasts.com/screencast/api-platform-securityScreenshots
Download link
rapidgator.net:
nitroflare.com:
We need your support!
Make a donation to help us stay online
Bitcoin (BTC)
bc1q08g9d22cxkawsjlf8etuek2pc9n2a3hs4cdrld
Bitcoin Cash (BCH)
qqvwexzhvgauxq2apgc4j0ewvcak6hh6lsnzmvtkem
Ethereum (ETH)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
Litecoin (LTC)
ltc1qt6g2trfv9tjs4qj68sqc4uf0ukvc9jpnsyt59u
USDT (ERC20)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
USDT (TRC20)
TYdPNrz7v1P9riWBWZ317oBgJueheGjATm
Information |
|||
 |
Users of GUESTS are not allowed to comment this publication. | ||