Commit graph

57 commits

Author SHA1 Message Date
Grzegorz Sadowski
80de2fccf0
[Security] Rename API firewalls 2024-10-17 12:42:17 +02:00
Grzegorz Sadowski
5214bbb114
Merge branch '1.14' into 2.0
* 1.14:
  [API] Rename and deprecate route parameters
  [UserBundle] Deprecate security related classes and services that will be removed in 2.0
2024-10-17 12:36:14 +02:00
Grzegorz Sadowski
79f8212a06
[API] Rename and deprecate route parameters 2024-10-17 08:58:03 +02:00
Michał Pysiak
06c2ebdbf3
Add chain user_checker config to firewalls 2024-10-15 12:48:18 +02:00
Michał Pysiak
9c1aaff12e
Remove AdvancedUserInterface 2024-10-15 12:48:18 +02:00
Michał Pysiak
3588bba538
[Security] Add user_checker firewall option 2024-10-15 12:48:18 +02:00
Michał Pysiak
5c66672fec
[Shop] Add json login 2024-09-27 10:39:46 +02:00
Grzegorz Sadowski
cca95b5a33
Merge Symfony 7 into 2.0 (#16351)
| Q               | A
|-----------------|-----
| Branch?         | 2.0 
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets |
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.12 or 1.13 branches
 - Features and deprecations must be submitted against the 1.14 branch
- Features, removing deprecations and BC breaks must be submitted
against the 2.0 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2024-09-24 12:09:21 +02:00
Michał Pysiak
93528d2062
Remove unused urls from security 2024-09-24 07:37:06 +02:00
Grzegorz Sadowski
108fbf7b5d [SF7] Update configs 2024-09-16 14:22:00 +02:00
Wojdylak
f62a814d48
[Maintenance] Add image firewall 2024-04-08 12:44:29 +02:00
Rafikooo
9fdc244a35
[API] Change endpoint for administrator reset password 2024-03-11 17:00:08 +01:00
Rafikooo
05ff93ffb0
[API] Change endpoint for requesting customer authentication token 2024-03-11 17:00:08 +01:00
Rafikooo
b0e1c284e8
[API] Change endpoint for requesting admin authentication token 2024-03-11 17:00:08 +01:00
Jan Goralski
1d1578733a
[Maintenance][Security] Update shop logout handling 2022-09-20 10:43:39 +02:00
Ernest Warwas
530e68ea3b
[Events] Fixed cart blamin in API
[Events] Fixed cart blamin in API

[Spec] Fix for spec

ShopCartBlamerListener reverted
2022-09-15 15:05:23 +02:00
Ernest Warwas
7f6cc66e7b
Fix for failing scenario when customer changing email
Revert lexik guard for api

Commented scenario for test purposes

Test if set token to null fixes the scenario

spec fix
2022-09-15 15:05:23 +02:00
Loïc Frémont
5f2ab45399
Enable authenticator manager 2022-09-15 15:05:22 +02:00
Jakub Tobiasz
1b2750ba01 Add RequestPasswordReset page 2022-07-07 21:16:11 +02:00
Jakub Tobiasz
722ae59852 Allow anonymous access to request administrator's password reset email 2022-07-06 10:37:43 +02:00
Jakub Tobiasz
9e0bc8eed3 Add requesting an administrator's password reset to ResetPasswordRequest api resource 2022-07-06 10:37:43 +02:00
Loïc Frémont
eb4a6a4920 Replace encoders with password_hashers 2022-06-03 18:19:01 +02:00
Kamil Kokot
5f3d5a8273 Remove AdminApiBundle from default Sylius installation 2021-04-16 15:07:46 +01:00
SirDomin
2b0d76d73d
[API] move security parameters to bundles 2021-01-25 12:40:55 +01:00
SirDomin
078cac2edc
[Spec] added new test to work with long api routes 2021-01-21 12:21:38 +01:00
SirDomin
746eede919
[Doc] UPGRADE file updated 2021-01-21 12:21:38 +01:00
SirDomin
4d03e0d3e6
[API] change new-api to api 2021-01-21 12:21:37 +01:00
Mateusz Zalewski
d0bd9cceb0
Merge branch '1.8' into master
* 1.8:
  Change route prefixes in security.yaml
2020-12-04 10:28:28 +01:00
Jacques Bodin-Hullin
338b2a10e1
Change route prefixes in security.yaml 2020-11-18 16:02:59 +01:00
Łukasz Chruściel
1714859934
Merge branch '1.8'
* 1.8:
  [UPGRADE] Update versions
  Update UPGRADE-1.8.md
  Update UPGRADE-1.8.md
  Update upgrade guide
  Fix order
  Use proper parameters in access control patterns
2020-11-10 17:39:42 +01:00
Adam Kasperczak
787d7e4422 [Api][Address] Add missing behats scenario 2020-10-30 10:53:47 +01:00
Adam Kasperczak
977e0732ed [API][AddressBook] protect addressbook with new firewall 2020-10-30 10:49:11 +01:00
Joachim Løvgaard
3f75a171f3
Fix order 2020-10-06 17:27:25 +02:00
Joachim Løvgaard
d2b4a308b8
Use proper parameters in access control patterns 2020-10-06 17:27:25 +02:00
Grzegorz Sadowski
c5a9db85e9
[API] Separate providers for shop and admin users 2020-10-02 10:52:11 +02:00
Adam Kasperczak
588e075110 [API] refactor product related endpoints 2020-09-09 11:13:02 +02:00
Adam Kasperczak
81bebecc35 [Api][Administrator] refactor endpoints for admin and admin avatar 2020-08-31 17:57:47 +02:00
Jacques Bodin-Hullin
ae6cd14820
Use env(SYLIUS_ADMIN_ROUTING_PATH_NAME) as admin's route name 2020-07-20 20:16:04 +02:00
Kamil Kokot
e03a4e9e0f
Update config/packages/security.yaml
Co-authored-by: Łukasz Chruściel <lchrusciel@gmail.com>
2020-05-14 10:17:09 +02:00
Tomanhez
be06c355d8 Add exception to shop firewall regexp 2020-05-11 10:36:17 +02:00
Grzegorz Sadowski
9909bc928c
[API] Configure separate endpoints for admin and shop retrieving authentication token 2020-04-29 14:53:59 +02:00
Łukasz Chruściel
55b486a1ca
[API] Unified admin and shop paths 2020-04-29 14:53:58 +02:00
Mateusz Zalewski
2ef66bcacb
Remove custom endpoint and allow to access a generic one for shop 2020-04-27 15:12:36 +02:00
Grzegorz Sadowski
0732d96305
[API][Shop] Add customer login 2020-03-30 14:46:28 +02:00
Grzegorz Sadowski
1c8e9743ed
[API] Add prefix to all admin routes 2020-03-27 15:12:27 +01:00
Mateusz Zalewski
8ae82a47cf
[Security] Anonymous access to swagger and login request 2020-03-17 15:14:25 +01:00
Mateusz Zalewski
f4d7b54da3
[API] Install jwt authentication bundle and configure basic security 2020-03-17 15:14:24 +01:00
Mateusz Zalewski
39fac1c911
Merge branch '1.3' into 1.4
* 1.3:
  [Config] Enforce re authorization
  Fix re-authenticating for impersonated users
2019-04-05 14:17:50 +02:00
Łukasz Chruściel
a994702a70
[Config] Enforce re authorization 2019-04-05 13:15:57 +02:00
Kamil Kokot
f2e68965f5
Setup seamless change to argon2i 2019-01-10 17:51:57 +01:00