API Platform 2 Part 1: Serious RESTful APIs

Hey vLoght!

Interesting idea... it's not currently on my list to cover for the next "security" tutorial... because they're kinda two separate things. But, I've upvoted this in our internal idea list - it's something that we *may* cover, but I don't have any timing yet.

Cheers!

I'm waiting for api-platform and oauth2. :)

Wednesday :)

Bah, ok *tomorrow*, I promise - we hit a last-second snag. Sorry about that!

Hey Romeo,

Thank you for your feedback! We will cover CRUD in this course, and will slightly mention GraphQL, but, unfortunately, GraphQL won't be a part of basics. We're going to cover GraphQL in a separate course - this topic deserves a separate tutorial.

Cheers!

Hey Imad,

Unfortunately no, not in this episode at least. Security is a big separate topic, we're definitely going to cover it, but in next episodes. In this one we're going to cover basics only. Thank you for understanding!

Cheers!

It would be nice to have it

Hey Manoj,

Thank you for your interest in this topic! See my answer for more context: https://symfonycasts.com/sc...

Cheers!

Hey Chtioui,

You may find some deprecations along the way but in general all of the concepts are still relevant.

Oh, by the way, we just released a new tutorial about APIPlatform 3 https://symfonycasts.com/screencast/api-platform

Cheers!

Hey MolloKhan,
Thank you for the answer.
I'm just starting a new project and I'm confused with the version of the API-platform the I will work with, because I want to choose a stable and well documented version.
Also, I want to know whether OAuth2 Server will be part of upcoming tutorials with API Platform 3 because I want to add social authentication to my web app.

The APiPlatform team has done a great job at documenting their project, and as far as I know, version 3 has been stable since a few months ago. About covering social authentication in the next tutorial, I'm not certain about it but I'll ask Ryan :)

Thank you!

Hey @Chtioui!

No OAuth / social auth in the upcoming API Platform tutorials. If you want to allow your users to "log in" via some social service, I'd check out https://github.com/knpuniversity/oauth2-client-bundle. I don't think adding social auth will have much to do with API Platform or your API. If I were building a JS-heavy frontend, I would still probably use the normal "OAuth flow" used in that bundle where your user clicks "log in", you redirect them to the service (e.g. GitHub/Facebook), then that service redirects back, and you "log in" the user normally, use normal sessions.

And yes, I agree with Diego - v3 is the version to use for API Platform! However, it DOES require Symfony 6 iirc. IF you need to use 5.4, API Platform 2.7 is totally great also.

Cheers!

Hey Richad-H!

It's planned! Work hasn't started yet, but this is a high priority for me - time to update this for API Platform 3!

Cheers!

Hey Shane,

Unfortunately, we don't have any screencasts about deploying with IIS unfortunately, but we do have a tutorial about deploying in general, so probably you could take a look at it and find if useful for your case: https://symfonycasts.com/sc... - the Ansistrano is a special tool that allow you to deploy any project (not only written in PHP) to any server. It's based on Ansible language, but it's pretty simple and intuitive one, so you don't have to know Ansible to start with Ansistrano course. But in case you would like to know more about it and understand it even better - we have a separate course about it too: https://symfonycasts.com/sc... - but as I said, it's just in case you want to learn it in deep, it's not required for starting Ansistrano course :)

I hope this helps, sorry we can't help more!

Cheers!

Hey Mepcuk!

Hmm, I'm not totally sure I understand your question. You CAN have calculated fields (but I think you probably already know this)... but I'm not sure what you mean by "date range". What would the API call look like (e.g. GET /api/cities?start_date=..) and was is the expected JSON result?

Cheers!

I have weather endpoint where stored all weather data. Now i need to get average, GET /average_weather/city?start_date=?&end_date= my idea is inject via construct into plain entity average_weather weather repository. Create method in repository getAverage with start and end date parameters? It is correct way?

Hmmm. The first question is: what does the response data look like for a normal call to the "weather" endpoint (like what fields are in the JSON)? And what will the fields look like in this new "average weather" endpoint? If they are significantly different, then I think you are possibly dealing with an entirely new "API Resource" - e.g. AverageWeather (which would be a non-entity resource) - you even structured your URL with this in mind - GET /average_weather/city.... Also, would the "average weather" endpoint always return just ONE result?

I'm sorry I'm not giving many answers yet - there are just a lot of variables. Your idea won't quite work, but we could make it work. Instead of trying to inject the repository into the entity, I would create a custom data provider that extends/uses the normal "entity provider". This custom data provider would allow the "entity provider" to do its normal work... but THEN you would calculate the "average" temperature and set it into a non-persisted field - e.g. setAverageTemperature(). This property would be exposed to the API. To read the query parameters, you could keep it simple and inject the RequestStack into your custom provider and read them manually.

Buuuuut, whether this is the right way depends on the above questions :).

Cheers!

I was looked your Api 3 part and all questions are now clear. No more question. You just said please can you look my Api part 3 ))) thank you for awesome video tutorials

I think it is another endpoint GET /average_weather - only average data in JSON (like wind, rain - two results between date range) about all cities (it is partial data GET / weather_station/city - include all data about station - city) Thank you for idea, i looking into custom data provider. If on symfonycast exist similar video ? Huge thanks for help

Hey Mepcuk!

Excellent! Then sounds more to me like a totally separate ApiResource vs an extra "operation" on an existing ApiResource... but I'm still not entirely sure. Usually you will return the same fields in all situation for one ApiResource. The fact that you will be returning different data makes me think it is a new/separate ApiResource. Though, again, I could be wrong... if the data between the normal /weather_station/city and /average_weather are quite similar.

Anyways, related screencasts:

A) Custom data provider: https://symfonycasts.com/sc... and the next few chapters
B) Totally custom ApiResource class (e.g. AverageWeather): https://symfonycasts.com/sc...

Cheers!

Hi Gaetano S.!

Sorry for my very slow reply! I don't know Flutter or Strapi, so I probably can't give a lot of great opinions on this. However, as an outside, I'll admit that the setup looks complex - with a mixture of a headless Node CMS, Api Platform, etc - it's a lot. It totally might be necessary - but if you can start simpler, that's always a good choice.

Good luck!

Finally I think I will use only Strapi because I need something built-in for content internationalisation. And then I will use an API gateway to protect it.
Anyway always thanks for your time.

Cheers

Hey Ahmedbhs,

IMO, it should come from your business criteria :) Micro-service architecture suppose you have at least a few standalone applications, and if some application is unavailable, like broken or attacked - the main application still works well but with limited functionality. But once again, it should come from your business needs, from your project, probably you even don't need that complexity. Basically, if you need a complex single-page application - you probably should look into the direction of API, as you would want to generate only data on the server side and render the view on the client side base on the data your API return. But single-page app is not required for you - take a look at MVC instead to prepare the whole page on your server side and return the already generated HTML page to your end users - it should be more straightforward and simple. But still, on your MVC project you can still leverage some AJAX requests to make some parts of your application work without page reloading.

I hope this helps!

Cheers!

Hi sridharpandu!

It sounds like you've done some excellent research! I am not personally responsible for API Platform and its docs, but I know the team that is, and I'm sure they would love any updates or improvements that you could make to the documentation :). I can give some of my thoughts on some of your points:

> nor symfony casts covers all aspects of creating data fixtures for testing

I agree! We do cover this in a much more interesting way in our latest tutorial on API Platform - you can see some of the setup here using a cool library called Foundry - https://symfonycasts.com/sc.... I dislike many of the tools like Alice that are mentioned by API Platform. Foundry makes added data (in fixtures and a test) an absolute joy and comes with nice features like automatically resetting the database between tests. You will be able to do your "short code" thing in the fixtures very easy, as it's just PHP code :).

Cheers!

Thank you for the link to Foundy. Will check it out.

Hey Joel L.!

To be honest, I'm not sure. It depends on the demand for that... and I haven't had a *ton* of people asking about GraphQL yet... though that might change.

Sorry I can't give you a better answer!

Cheers!

Hi soufianejhioui!

Welcome to the nice world of API Platform :).

1 - Is api Platform suitable for making microservices ?

Sure! It makes creating APIs quick and easy - I don't see any problem here.

My matter is i have an openapi specs and i want to generate php classes to handle the request. The request will probably make crud operations of many entities and not only one so i can't just diretly use doctrine models. how do i i handle this bestens

It sounds to me like you would want to create custom "model classes" for your API resources. This is not something we cover in our tutorial, but it's a fairly common use-case. Basically, instead of adding @ApiResource to an entity, you would create a class in the src/Entity/ directory (you could put it somewhere else, you would just need to update some API Platform config to look in the new directory), NOT make this class an entity, and then add @ApiResource to THIS class. You would then design this class to match your OpenAPI spec exactly: this gives you the power to design your API like you need, even if it looks quite different than your database entities. Finally, in order for API Platform to know how to fetch and persist data for your non-entity class, you will need to create a custom "data persister" - example https://symfonycasts.com/screencast/api-platform-security/encode-user-password - and a custom "data provider" - https://api-platform.com/docs/core/data-providers/

Let me know if that helps :).

2 - Is there a tool you suggest to auto generate symfony / doctrine classes from openapi specs to use it with api platform ?

I do not think that there is. In your case, since you said that your OpenAPI spec looks quite different than your database entities would probably look, you wouldn't want to generate "entities" from your OpenAPI spec anyways: you really want to create non-entity classes that match exactly. And I don't think there is a way to generate in this direction. The reason is that API Platform is kind of meant to be used in the other direction: you create the ApiResource classes and customize them, and then ApiPlatform generates the OpenAPI document based on your classes. In your case, I think you would need to create the classes by hand, then customize them until the OpenAPI document generated by API Platform matches the one you have currently.

Cheers!

Hey soufianejhioui !

First of all thanks fir this great tutorial

Cheers! And welcome :).

How to generate Api Models from an existing database. It mut be a lot of Symfony tools to do this.

What you really want to do is generating a set of Doctrine entity classes from your existing database. Once you have done this, you only need to add the @ApiResource annotation to convert the entity class into an API resource.

The tool to do this is here: https://symfony.com/doc/current/doctrine/reverse_engineering.html - it's not perfect (well, it will do a perfect job if your database is "perfect" and "normalized", but not a perfect job if your database has some "weirdness"), but it should give you a set of "nearly correct" entity classes. You can then "tweak" the @ORM\ annotations to (hopefully) make it perfect. The goal would be that you are able to run php bin/console doctrine:schema:update --dump-sql and this returns NO sql. This would mean that your Doctrine entities "match" your database structure perfectly. Then add @ApiResource to each entity and you're good!

How well this will work (or not work) depends on how normalized your existing database is. Doctrine likes databases to be "neat" and "normalized", You can make Doctrine work with a very non-normalized database, but it requires more setup work.

Cheers!

Hi weaverryan
Thanks for the reply. I will give the tool you suggest a try and see the result. As you said it's just fine if i get a set of "nearly correct" entity classes that will be a nice start.
Cheers !