piotrbrzezina

<?php 
class SwaggerDecorator implements NormalizerInterface
{
    private $decorated;

    public function __construct(NormalizerInterface $decorated)
    {
        $this->decorated = $decorated;
    }

piotrbrzezina

<?php 

class OwnerExtension implements QueryCollectionExtensionInterface
{

    private $tokenStorage;

    public function __construct(TokenStorageInterface $tokenStorage)
    {
        $this->tokenStorage = $tokenStorage;

piotrbrzezina

<?php

/**
 * @ApiResource(
 *     ...
 *     itemOperations={
 *      "get" = { object.user == user" },
 *      "put" = { object.user == user" }
 *     },
 * )

piotrbrzezina

/**
 * @ApiResource(
 *     normalizationContext={"groups"={"subjectList"}},
 *     denormalizationContext={"groups"={"subjectCreate"}},
 *     itemOperations={"get","put"},
 *     attributes={"access_control"="is_granted('ROLE_USER')"}
 * )
 *
 * @ORM\Entity
 */

piotrbrzezina

<?php

namespace App\EventSubscriber;

use ApiPlatform\Core\EventListener\EventPriorities;
use App\Entity\User;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpKernel\Event\GetResponseForControllerResultEvent;
use Symfony\Component\HttpKernel\KernelEvents;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;

piotrbrzezina

<?php
// ...
class User implements UserInterface
{
    // ... 
    public $roles = ['ROLE_USER'];

    /**
     * ...
     * @Assert\Length(min="8", max="255", groups={"userCreate", "userChangePassword"})

piotrbrzezina

    encoders:
        App\Entity\User:
            algorithm: 'argon2i'
            memory_cost: 1024
            time_cost: 2
            threads: 2           

piotrbrzezina

login:
    path: /login

piotrbrzezina

...

      firewalls:
        login:
            pattern:  ^/login
            stateless: true
            anonymous: true
            provider: db_provider
            json_login:
                check_path: /login

piotrbrzezina

security:
    providers:
        db_provider:
            entity:
                class: App\Entity\User
                property: email