Make hydra documentation respect access control

オープン

#2,719 2019年4月9日に作成コメント 11 件リアクション 0 件担当者 0 名 GitHub で見る

説明

My api has public and private entries.

But the hydra and swagger documentations expose all of them.

As a result, a connected user that has access to only parts of the api will see the whole documentation which is not a good thing for security.

More importantly, the admin is broken in that case because it tries to fetch every resource in the hydra documentation.

この issue はまだ評価されていません。