api-platform / api-platform/core
Make hydra documentation respect access control
Đang mở
- Ngôn ngữ chính
- PHP
- Star
- 2.6k
- Fork
- 980
- Merge trung bình
- 2 ngày 5 giờ
- Pull request đã merge (30 ngày)
- 48
Mô tả
My api has public and private entries.
But the hydra and swagger documentations expose all of them.
As a result, a connected user that has access to only parts of the api will see the whole documentation which is not a good thing for security.
More importantly, the admin is broken in that case because it tries to fetch every resource in the hydra documentation.
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.