Commit graph

51 commits

Author SHA1 Message Date
Michał Pysiak
5c66672fec
[Shop] Add json login 2024-09-27 10:39:46 +02:00
Grzegorz Sadowski
cca95b5a33
Merge Symfony 7 into 2.0 (#16351)
| Q               | A
|-----------------|-----
| Branch?         | 2.0 
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets |
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.12 or 1.13 branches
 - Features and deprecations must be submitted against the 1.14 branch
- Features, removing deprecations and BC breaks must be submitted
against the 2.0 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2024-09-24 12:09:21 +02:00
Michał Pysiak
93528d2062
Remove unused urls from security 2024-09-24 07:37:06 +02:00
Grzegorz Sadowski
108fbf7b5d [SF7] Update configs 2024-09-16 14:22:00 +02:00
Wojdylak
f62a814d48
[Maintenance] Add image firewall 2024-04-08 12:44:29 +02:00
Rafikooo
9fdc244a35
[API] Change endpoint for administrator reset password 2024-03-11 17:00:08 +01:00
Rafikooo
05ff93ffb0
[API] Change endpoint for requesting customer authentication token 2024-03-11 17:00:08 +01:00
Rafikooo
b0e1c284e8
[API] Change endpoint for requesting admin authentication token 2024-03-11 17:00:08 +01:00
Jan Goralski
1d1578733a
[Maintenance][Security] Update shop logout handling 2022-09-20 10:43:39 +02:00
Ernest Warwas
530e68ea3b
[Events] Fixed cart blamin in API
[Events] Fixed cart blamin in API

[Spec] Fix for spec

ShopCartBlamerListener reverted
2022-09-15 15:05:23 +02:00
Ernest Warwas
7f6cc66e7b
Fix for failing scenario when customer changing email
Revert lexik guard for api

Commented scenario for test purposes

Test if set token to null fixes the scenario

spec fix
2022-09-15 15:05:23 +02:00
Loïc Frémont
5f2ab45399
Enable authenticator manager 2022-09-15 15:05:22 +02:00
Jakub Tobiasz
1b2750ba01 Add RequestPasswordReset page 2022-07-07 21:16:11 +02:00
Jakub Tobiasz
722ae59852 Allow anonymous access to request administrator's password reset email 2022-07-06 10:37:43 +02:00
Jakub Tobiasz
9e0bc8eed3 Add requesting an administrator's password reset to ResetPasswordRequest api resource 2022-07-06 10:37:43 +02:00
Loïc Frémont
eb4a6a4920 Replace encoders with password_hashers 2022-06-03 18:19:01 +02:00
Kamil Kokot
5f3d5a8273 Remove AdminApiBundle from default Sylius installation 2021-04-16 15:07:46 +01:00
SirDomin
2b0d76d73d
[API] move security parameters to bundles 2021-01-25 12:40:55 +01:00
SirDomin
078cac2edc
[Spec] added new test to work with long api routes 2021-01-21 12:21:38 +01:00
SirDomin
746eede919
[Doc] UPGRADE file updated 2021-01-21 12:21:38 +01:00
SirDomin
4d03e0d3e6
[API] change new-api to api 2021-01-21 12:21:37 +01:00
Mateusz Zalewski
d0bd9cceb0
Merge branch '1.8' into master
* 1.8:
  Change route prefixes in security.yaml
2020-12-04 10:28:28 +01:00
Jacques Bodin-Hullin
338b2a10e1
Change route prefixes in security.yaml 2020-11-18 16:02:59 +01:00
Łukasz Chruściel
1714859934
Merge branch '1.8'
* 1.8:
  [UPGRADE] Update versions
  Update UPGRADE-1.8.md
  Update UPGRADE-1.8.md
  Update upgrade guide
  Fix order
  Use proper parameters in access control patterns
2020-11-10 17:39:42 +01:00
Adam Kasperczak
787d7e4422 [Api][Address] Add missing behats scenario 2020-10-30 10:53:47 +01:00
Adam Kasperczak
977e0732ed [API][AddressBook] protect addressbook with new firewall 2020-10-30 10:49:11 +01:00
Joachim Løvgaard
3f75a171f3
Fix order 2020-10-06 17:27:25 +02:00
Joachim Løvgaard
d2b4a308b8
Use proper parameters in access control patterns 2020-10-06 17:27:25 +02:00
Grzegorz Sadowski
c5a9db85e9
[API] Separate providers for shop and admin users 2020-10-02 10:52:11 +02:00
Adam Kasperczak
588e075110 [API] refactor product related endpoints 2020-09-09 11:13:02 +02:00
Adam Kasperczak
81bebecc35 [Api][Administrator] refactor endpoints for admin and admin avatar 2020-08-31 17:57:47 +02:00
Jacques Bodin-Hullin
ae6cd14820
Use env(SYLIUS_ADMIN_ROUTING_PATH_NAME) as admin's route name 2020-07-20 20:16:04 +02:00
Kamil Kokot
e03a4e9e0f
Update config/packages/security.yaml
Co-authored-by: Łukasz Chruściel <lchrusciel@gmail.com>
2020-05-14 10:17:09 +02:00
Tomanhez
be06c355d8 Add exception to shop firewall regexp 2020-05-11 10:36:17 +02:00
Grzegorz Sadowski
9909bc928c
[API] Configure separate endpoints for admin and shop retrieving authentication token 2020-04-29 14:53:59 +02:00
Łukasz Chruściel
55b486a1ca
[API] Unified admin and shop paths 2020-04-29 14:53:58 +02:00
Mateusz Zalewski
2ef66bcacb
Remove custom endpoint and allow to access a generic one for shop 2020-04-27 15:12:36 +02:00
Grzegorz Sadowski
0732d96305
[API][Shop] Add customer login 2020-03-30 14:46:28 +02:00
Grzegorz Sadowski
1c8e9743ed
[API] Add prefix to all admin routes 2020-03-27 15:12:27 +01:00
Mateusz Zalewski
8ae82a47cf
[Security] Anonymous access to swagger and login request 2020-03-17 15:14:25 +01:00
Mateusz Zalewski
f4d7b54da3
[API] Install jwt authentication bundle and configure basic security 2020-03-17 15:14:24 +01:00
Mateusz Zalewski
39fac1c911
Merge branch '1.3' into 1.4
* 1.3:
  [Config] Enforce re authorization
  Fix re-authenticating for impersonated users
2019-04-05 14:17:50 +02:00
Łukasz Chruściel
a994702a70
[Config] Enforce re authorization 2019-04-05 13:15:57 +02:00
Kamil Kokot
f2e68965f5
Setup seamless change to argon2i 2019-01-10 17:51:57 +01:00
Kamil Kokot
722ba0048b
Set "argon2i" as the default encoder 2019-01-10 17:29:42 +01:00
Kamil Kokot
c4872d24fc
Set up default encoders for Sylius application 2019-01-09 18:20:20 +01:00
Kamil Kokot
d694c5fac5
Fix backwards compatibility for security configuration 2019-01-09 16:35:26 +01:00
Peter Ukena
9d70a669f0 Renamed encoder and encoder service per github discussion 2018-12-18 14:54:59 +01:00
Peter Ukena
6343f754d2 ShopUser class is now EncoderAware to provide more flexibility for choosing how to encode passwords 2018-12-06 15:11:12 +01:00
Kamil Kokot
23d685d596
Miscellaneous fixes leading to a working cache warmup 2018-08-15 14:31:53 +02:00