Chapters

37 Chapters | 3:43:31 |

01

API Docs on Production?

8:22
02

API Tokens? Session Cookies?

8:07
03

API Login Form with json_login

5:36
04

Handling Authentication Errors

3:47
05

On Authentication Success

6:03
06

Logout & Passing API Data to JavaScript

5:45
07

Passing Values to Stimulus

4:32
08

Token Types & The ApiToken Entity

5:59
09

Generating the API Token & Fixtures

5:58
10

Access Token Authenticator

8:56
11

Customizing the OpenAPI Docs

7:31
12

API Token Scopes

5:51
13

Deny Access with The "security" Option

7:11
14

Bootstrapping a Killer Test System

8:18
15

JSON Test Assertions & Seeding the Database

3:41
16

Advanced & Flexible JSON Test Assertions

4:04
17

Testing Authentication

4:59
18

Customizing Browser Globally

3:50
19

Testing Token Authentication

3:24
20

New PUT Behavior

4:46
21

Only Allow Owners to Edit

7:49
22

Allow Admin Users to Edit any Treasure

4:11
23

Security Voter

6:13
24

Conditional Fields by User: ApiProperty

5:13
25

User Test + Plain Password

4:21
26

State Processors: Hashing the User Password

6:55
27

Validation Groups & Patch Formats

8:01
28

Dynamic Groups: Context Builder

8:26
29

Custom Normalizer

5:08
30

Normalizer Decoration & "Normalizer Aware"

6:29
31

Totally Custom Fields

3:24
32

Custom Validator

7:58
33

Validating how Values Change

8:30
34

Auto Setting the "owner"

4:19
35

Query Extension: Auto-Filter a Collection

6:15
36

404 On Unpublished Items

8:00
37

Filtering Relation Collection

5:39

> APIs > API Platform 3 Part 2: Security for your Treasures

Buy Access to Course

35.

Query Extension: Auto-Filter a Collection

|

|

Autoplay

Keep on Learning!

If you liked what you've learned so far, dive in! Subscribe to get
access to this tutorial plus video, code and script downloads.

Start your All-Access Pass

Buy just this tutorial for $12.00

Previous Chapter

Next Challenge

With a Subscription, click any sentence in the script to jump to that part of the video!

Login Subscribe

Login or register to check out the script

10 Comments

Sort By

Login or Register to join the conversation

randomsymbols 1 year ago

Using QueryBuilder outside of Repository is mixing infrastructure and business logic, seems like a bad idea ... What if we move our dragon treasures from SQL to MongoDB?

|

MolloKhan SFCASTS randomsymbols 1 year ago edited

Hey @randomsymbols

yea, usually it is better to keep the database abstracted from your business rules, but in this case, the QueryBuilder is part of the ApiPlatform interface. I suppose they chose it that way for a good reason. Besides that, if you switch from SQL to MongoDB you'll still have these architecture issues.

Cheers!

|

Yangzhi 2 years ago

hi,my entity has endAt field,datetime type, when i getcollection, i want return DATEDIFF(endAt,NOW()) as leftDay and order by leftDay,
so i create custom Extensions

class ContractCollectionExtensions implements QueryCollectionExtensionInterface
{

    public function applyToCollection(QueryBuilder $queryBuilder, QueryNameGeneratorInterface $queryNameGenerator, string $resourceClass, Operation $operation = null, array $context = []): void
    {
        if ($resourceClass !== Contract::class || !$operation instanceof GetCollection) {
            return;
        }
        $rootAlias = $queryBuilder->getRootAliases()[0];
        if (isset($context['filters']['withOutSelf'])) {
            $queryBuilder->andWhere(
                $queryBuilder->expr()->neq(sprintf('%s.ourIdentity', $rootAlias), '\'甲方\'')
            );
        }
        $queryBuilder->addSelect(sprintf('DATELEFT(%s.endAt) as leftDay', $rootAlias));
        $queryBuilder->addOrderBy('leftDay', 'ASC');
    }
}

of course i create custom DQL function and work fine

but: return is array [Entity,leftDay] not Entity object, please how fix it.thanks

|

weaverryan SFCASTS Yangzhi 2 years ago

Hey @Yangzhi!

Sorry for the slow reply - holidays!

Try this:

$queryBuilder->addSelect(sprintf('DATELEFT(%s.endAt) as HIDDEN leftDay', $rootAlias));

The HIDDEN should allow you to select the field so that you can sort by it, but not include it in the results. Let me know if that works!

Cheers!

|

Yangzhi weaverryan 2 years ago

thank you,but in my case,i want use leftDay

|

MolloKhan SFCASTS Yangzhi 2 years ago edited

Hey @Yangzhi

If the leftDay field is not part of your entity data Doctrine will add it to the result along with the entity object. If you want both things in a single object you can create a DTO

Cheers!

1 |

Sylvain-B 2 years ago

Hello !
I think there is a typo, the correct command seems to be
symfony php bin/phpunit --filter=testGetCollectionOfTreasures
and not
symfony php bin/console phpunit --filter=testGetCollectionOfTreasures
Thanks :-)

|

MolloKhan SFCASTS Sylvain-B 2 years ago edited

Hey @Sylvain-B

You're right! Thank you, I'll fix it up

Cheers!

|

Oleguer-C 2 years ago

Hello!
This is not a technical inquiry, I just wanted to point out that in some videos, like this one, the subtitles are not well synchronized. As a non-native English speaker, I have to say that this makes it difficult for me to understand because when I don't understand something and go to the subtitles, they are at a different moment than the audio.
If you can review this, I'm sure that future users who need subtitles will appreciate it.
Thank you!

|

weaverryan SFCASTS Oleguer-C 2 years ago

Hey @Oleguer-C!

I appreciate you mentioning this - that's a bug in this video, from a mistake I made in the script. The subtitles should always be perfectly sync'ed, but that mistake definitely caused a bit un-sync starting at 2:42. We'll get that fixed up!

Cheers!

|

API Platform 3 Symfony 6.2

What PHP libraries does this tutorial use?

// composer.json
{
    "require": {
        "php": ">=8.2",
        "ext-ctype": "*",
        "ext-iconv": "*",
        "api-platform/core": "^3.0", // v3.1.2
        "doctrine/annotations": "^2.0", // 2.0.1
        "doctrine/doctrine-bundle": "^2.8", // 2.8.3
        "doctrine/doctrine-migrations-bundle": "^3.2", // 3.2.2
        "doctrine/orm": "^2.14", // 2.14.1
        "nelmio/cors-bundle": "^2.2", // 2.2.0
        "nesbot/carbon": "^2.64", // 2.66.0
        "phpdocumentor/reflection-docblock": "^5.3", // 5.3.0
        "phpstan/phpdoc-parser": "^1.15", // 1.16.1
        "symfony/asset": "6.2.*", // v6.2.5
        "symfony/console": "6.2.*", // v6.2.5
        "symfony/dotenv": "6.2.*", // v6.2.5
        "symfony/expression-language": "6.2.*", // v6.2.5
        "symfony/flex": "^2", // v2.2.4
        "symfony/framework-bundle": "6.2.*", // v6.2.5
        "symfony/property-access": "6.2.*", // v6.2.5
        "symfony/property-info": "6.2.*", // v6.2.5
        "symfony/runtime": "6.2.*", // v6.2.5
        "symfony/security-bundle": "6.2.*", // v6.2.6
        "symfony/serializer": "6.2.*", // v6.2.5
        "symfony/twig-bundle": "6.2.*", // v6.2.5
        "symfony/ux-react": "^2.6", // v2.7.1
        "symfony/ux-vue": "^2.7", // v2.7.1
        "symfony/validator": "6.2.*", // v6.2.5
        "symfony/webpack-encore-bundle": "^1.16", // v1.16.1
        "symfony/yaml": "6.2.*" // v6.2.5
    },
    "require-dev": {
        "doctrine/doctrine-fixtures-bundle": "^3.4", // 3.4.2
        "mtdowling/jmespath.php": "^2.6", // 2.6.1
        "phpunit/phpunit": "^9.5", // 9.6.3
        "symfony/browser-kit": "6.2.*", // v6.2.5
        "symfony/css-selector": "6.2.*", // v6.2.5
        "symfony/debug-bundle": "6.2.*", // v6.2.5
        "symfony/maker-bundle": "^1.48", // v1.48.0
        "symfony/monolog-bundle": "^3.0", // v3.8.0
        "symfony/phpunit-bridge": "^6.2", // v6.2.5
        "symfony/stopwatch": "6.2.*", // v6.2.5
        "symfony/web-profiler-bundle": "6.2.*", // v6.2.5
        "zenstruck/browser": "^1.2", // v1.2.0
        "zenstruck/foundry": "^1.26" // v1.28.0
    }
}

Previous Chapter

Next Challenge