Merge 4.1

Author: soyuka

CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## v4.1.0-alpha.2
+
+### Bug fixes
+
+* [01fd74268](https://github.com/api-platform/core/commit/01fd74268cf0e4a289b31ea74bea7f4e089b8361) fix(laravel): restore accidentally removed BooleanFilter
+* [db40a63e7](https://github.com/api-platform/core/commit/db40a63e729fe03be84111dac2b0774fea4ab343) fix(hydra): rdfs:label should not duplicate title (#6748)
+* [deb2ed265](https://github.com/api-platform/core/commit/deb2ed265dfee7b8a73fd3b542aef3e29eca3412) fix(laravel): fix use laravel fillable for writable props (#6898)
+
+### Features
+
+* [c97db6bb2](https://github.com/api-platform/core/commit/c97db6bb2f6b2db9a6a17141bdb56bd51e9fc50d) feat: swagger ui persist authorization option (#6877)
+
+### Notes
+
+The [hydra patch](#6748) changes default `hydra:title` and uses the resource `shortname`. Previously the `hydra:title` information was duplicating the `hydra:description`. 
+The `rdfs:label` got removed from the `hydra:Class` as it was used instead of the `hydra:title`.
+On `hydra:property` `rdfs:label` got renamed to `label` as the `rdfs` namespace is available in the context. 
+The `ApiPlatform\Metadata\ErrorResource` and the `ConstraintViolation` (`ValidationException` class) are now generated directly from your PHP classes, only our `ConstraintViolationList` is hard-written and documents the `ConstraintViolation::violation` property. Therefore, your [own error resources](https://api-platform.com/docs/guides/error-resource/) are also documented. On top of that, we now set the `rdfs:subClassOf` to `hydra:Error`.
+`#[ApiProperty(hydra: false)]` allows you to skip a documented `hydra:supportedProperty` on a class.
+On write operations, we added the [expectsHeader](https://www.hydra-cg.com/spec/latest/core/#hydra:expectsHeader) field. 
+
+
 ## v4.1.0-alpha.1
 
 ### Bug fixes
@@ -17,14 +39,35 @@
 * [d0a442786](https://github.com/api-platform/core/commit/d0a44278630d201b91cbba0774a09f4eeaac88f7) feat(doctrine): enhance getLinksHandler with method validation and typo suggestions (#6874)
 * [f67f6f1ac](https://github.com/api-platform/core/commit/f67f6f1acb6476182c18a3503f2a8bc80ae89a0b)  feat(doctrine): doctrine filters like laravel eloquent filters  (#6775)
 
+## v4.0.16
+
+### Bug fixes
+
+* [dc4fc84ba](https://github.com/api-platform/core/commit/dc4fc84ba93e22b4f44a37e90a93c6d079c1c620) fix(graphql): securityAfterResolver not called
+
+### Features
+
+## v4.0.15
+
+### Bug fixes
+
+* [36cee399c](https://github.com/api-platform/core/commit/36cee399cfd519355b03d0406921066a22ab474c) fix(state): skip Content-Location header for GET requests (#6901)
+* [dba9de197](https://github.com/api-platform/core/commit/dba9de197001e91094e594f0e4dc638007cce7a6) fix(symfony): fix property restrictions for root resource with dynamic validation groups (#6908)
+
+### Features
+
+* [421d97ecf](https://github.com/api-platform/core/commit/421d97ecfdbc7d699a3d017d1e3ae3827a38b216) feat(laravel): add support for backed enum normalizers (#6911)
+
+Also contains [v3.4.15 changes](#v3415).
+
 ## v4.0.14
 
 ### Bug fixes
 
 * [97cdb6b3f](https://github.com/api-platform/core/commit/97cdb6b3f43471789e096c9dc3a0c3c7b6d4e43c) fix(state): remove ProcessorInterface laravel specific type
 * [b12a0d005](https://github.com/api-platform/core/commit/b12a0d005fda58a162b82a3574e6ee877838a55b) fix(graphql): register types for parameter args (#6895)
 
-### Features
+Also contains [v3.4.14 changes](#v3414).
 
 ## v4.0.13
 
@@ -36,8 +79,6 @@
 
 Also contains [v3.4.10 changes](#v3410).
 
-### Features
-
 ## v4.0.12
 
 ### Bug fixes
@@ -49,16 +90,12 @@ Also contains [v3.4.10 changes](#v3410).
 
 Also contains [v3.4.9 changes](#v349).
 
-### Features
-
 ## v4.0.11
 
 ### Bug fixes
 
 * [af66075fd](https://github.com/api-platform/core/commit/af66075fdd6b83bdebc1c4ca33cc0ab7e1a7f8af) fix(laravel): fix foregin keys (relations) beeing in attributes (#6843)
 
-### Features
-
 * [2d59c6369](https://github.com/api-platform/core/commit/2d59c63699b4602cfe4d62504896c6d4121c1be4) feat(laravel): belongs to many relations (#6818)
 
 Also contains [v3.4.8 changes](#v348).
@@ -73,8 +110,6 @@ Also contains [v3.4.8 changes](#v348).
 
 Also contains [v3.4.7 changes](#v347).
 
-### Features
-
 ## v4.0.9
 
 ### Bug fixes
@@ -85,16 +120,12 @@ Also contains [v3.4.7 changes](#v347).
 
 Also contains [v3.4.6 changes](#v346).
 
-### Features
-
 ## v4.0.8
 
 ### Bug fixes
 
 * [dddb97075](https://github.com/api-platform/core/commit/dddb97075af9c6e2517e1881b803c9d31a1913cf) fix(symfony): default formats order (#6780)
 
-### Features
-
 ## v4.0.7
 
 ### Bug fixes
@@ -106,8 +137,6 @@ Also contains [v3.4.6 changes](#v346).
 * [736ca045e](https://github.com/api-platform/core/commit/736ca045e6832f04aaa002ddd7b85c55df4696bb) fix(validator): allow to pass both a ConstraintViolationList and a previous exception (#6762)
 * [9ac3661b6](https://github.com/api-platform/core/commit/9ac3661b6a75255832203b87a9ba7994add64061) fix(hydra): store and use hydra context in a local variable (#6765)
 
-### Features
-
 ## v4.0.6
 
 ### Bug fixes
@@ -118,8 +147,6 @@ Also contains [v3.4.6 changes](#v346).
 * [67c5a2a24](https://github.com/api-platform/core/commit/67c5a2a2463bca94f0997b4fab1248a08994465b) fix(laravel): jsonapi error serialization (#6755)
 * [ac6f667f3](https://github.com/api-platform/core/commit/ac6f667f301f6c4c399a707faf00567239bd98d8) fix(laravel): collection relations other than HasMany (#6737)
 
-### Features
-
 * [cecd77149](https://github.com/api-platform/core/commit/cecd77149795c1a455ac72bc3ed0606413e69900) feat(laravel): use laravel cache setting (#6751)
 
 ## v4.0.5
@@ -129,8 +156,6 @@ Also contains [v3.4.6 changes](#v346).
 * [4171d5f9c](https://github.com/api-platform/core/commit/4171d5f9cd41731b857c53a186270ba0626baedf) fix(graphql): register query parameter arguments with filters (#6726)
 * [48ab53816](https://github.com/api-platform/core/commit/48ab53816c55e6116aa64ac81f522f4b7b9bb9f6) fix(laravel): make command writes to app instead of src (#6723)
 
-### Features
-
 ## v4.0.4
 
 ### Bug fixes
@@ -175,7 +200,7 @@ Also contains [v3.4.6 changes](#v346).
 * [c47e2996e](https://github.com/api-platform/core/commit/c47e2996e51c587c998fde88903703bd6ac9a43c) fix: default format and standard_put values
 * [e327f5f69](https://github.com/api-platform/core/commit/e327f5f69c823c1ed674eefc0eb2551e30fb36bd) fix(symfony): namespace of path segment name generator services (#6642)
 
-Notes: 
+Notes:
 
 `standard_put=true` is now the default, you can set it to `false` using `extra_properties.defaults`
 
@@ -274,6 +299,19 @@ Notes:
 
 * [0d5f35683](https://github.com/api-platform/core/commit/0d5f356839eb6aa9f536044abe4affa736553e76) feat(laravel): laravel component (#5882)
 
+## v3.4.16
+
+### Bug fixes
+
+* [dc4fc84ba](https://github.com/api-platform/core/commit/dc4fc84ba93e22b4f44a37e90a93c6d079c1c620) fix(graphql): securityAfterResolver not called
+* [9eb5c4e94](https://github.com/api-platform/core/commit/9eb5c4e941d0ebf59bc8ef5777b144db9b4a0899) fix(symfony): suggest `DocumentationAction` as replacement for deprecated `SwaggerUiAction` (#6894)
+
+## v3.4.15
+
+### Bug fixes
+
+* [ab03b5544](https://github.com/api-platform/core/commit/ab03b5544f742b98a39cc23fc157f1be7a2e0c63) fix(openapi): typing issue with `openapiContext` in `#[ApiProperty]` (#6910)
+
 ## v3.4.14
 
 ### Bug fixes
@@ -533,6 +571,13 @@ You should now install `api-platform/symfony` instead of `api-platform/core`.
 * [74986cb55](https://github.com/api-platform/core/commit/74986cb552182dc645bd1fc967faa0954dd59e0a) feat: inflector as service (#6447)
 * [b47edb2a4](https://github.com/api-platform/core/commit/b47edb2a499c34e79c167f963e3a626a3e9d040a) feat(serializer): context IRI in HAL or JsonApi format (#6215)
 
+## v3.3.15
+
+### Bug fixes
+
+* [dc4fc84ba](https://github.com/api-platform/core/commit/dc4fc84ba93e22b4f44a37e90a93c6d079c1c620) fix(graphql): securityAfterResolver not called 
+* [9eb5c4e94](https://github.com/api-platform/core/commit/9eb5c4e941d0ebf59bc8ef5777b144db9b4a0899) fix(symfony): suggest `DocumentationAction` as replacement for deprecated `SwaggerUiAction` (#6894)
+
 ## v3.3.14
 
 ### Bug fixes

composer.json

@@ -124,7 +124,7 @@
         "doctrine/common": "^3.2.2",
         "doctrine/dbal": "^4.0",
         "doctrine/doctrine-bundle": "^2.11",
-        "doctrine/mongodb-odm": "^2.6",
+        "doctrine/mongodb-odm": "^2.10",
         "doctrine/mongodb-odm-bundle": "^4.0 || ^5.0",
         "doctrine/orm": "^2.17 || ^3.0",
         "elasticsearch/elasticsearch": "^8.4",

docs/src/Kernel.php

@@ -164,9 +164,15 @@ public function executeMigrations(string $direction = Direction::UP): void
             $em = $this->getContainer()->get('doctrine.orm.entity_manager');
             $loader = new ExistingEntityManager($em);
             $dependencyFactory = DependencyFactory::fromEntityManager($confLoader, $loader);
+            $metadataStorage = $dependencyFactory->getMetadataStorage();
 
-            $dependencyFactory->getMetadataStorage()->ensureInitialized();
-            $executed = $dependencyFactory->getMetadataStorage()->getExecutedMigrations();
+            try {
+                $metadataStorage->ensureInitialized();
+            } catch (\Exception) {
+                // table exists
+            }
+
+            $executed = $metadataStorage->getExecutedMigrations();
 
             if ($executed->hasMigration(new Version($migrationClass)) && Direction::DOWN !== $direction) {
                 continue;

features/graphql/query.feature

@@ -677,3 +677,20 @@ Feature: GraphQL query support
     Then the response status code should be 200
     And the header "Content-Type" should be equal to "application/json"
     And the JSON node "data.getSecurityAfterResolver.name" should be equal to "test"
+
+
+  Scenario: Call security after resolver with 403 error (ensure /2 does not match securityAfterResolver)
+    When I send the following GraphQL request:
+    """"
+    {
+      getSecurityAfterResolver(id: "/security_after_resolvers/2") {
+        name
+      }
+    }
+    """
+    Then the response status code should be 200
+    And the response should be in JSON
+    And the header "Content-Type" should be equal to "application/json"
+    And the JSON node "errors[0].extensions.status" should be equal to 403
+    And the JSON node "errors[0].message" should be equal to "Access Denied."
+    And the JSON node "data.getSecurityAfterResolver.name" should not exist

features/hydra/collection.feature

@@ -77,7 +77,6 @@ Feature: Collections support
     When I send a "GET" request to "/dummies?page=7"
     Then the response status code should be 200
     And the response should be in JSON
-    And the header "Content-Location" should be equal to "/dummies.jsonld?page=7"
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
     And the JSON should be valid according to this schema:
     """

features/hydra/docs.feature

@@ -33,9 +33,9 @@ Feature: Documentation support
     And the JSON node "hydra:description" should contain "Made with love"
     And the JSON node "hydra:entrypoint" should be equal to "/"
     # Supported classes
-    And the Hydra class "The API entrypoint" exists
-    And the Hydra class "A constraint violation" exists
-    And the Hydra class "A constraint violation list" exists
+    And the Hydra class "Entrypoint" exists
+    And the Hydra class "ConstraintViolation" exists
+    And the Hydra class "ConstraintViolationList" exists
     And the Hydra class "CircularReference" exists
     And the Hydra class "CustomIdentifierDummy" exists
     And the Hydra class "CustomNormalizedDummy" exists
@@ -49,7 +49,6 @@ Feature: Documentation support
     # Doc
     And the value of the node "@id" of the Hydra class "Dummy" is "#Dummy"
     And the value of the node "@type" of the Hydra class "Dummy" is "hydra:Class"
-    And the value of the node "rdfs:label" of the Hydra class "Dummy" is "Dummy"
     And the value of the node "hydra:title" of the Hydra class "Dummy" is "Dummy"
     And the value of the node "hydra:description" of the Hydra class "Dummy" is "Dummy."
     # Properties
@@ -62,7 +61,7 @@ Feature: Documentation support
     And the value of the node "@type" of the property "name" of the Hydra class "Dummy" is "hydra:SupportedProperty"
     And the value of the node "hydra:property.@id" of the property "name" of the Hydra class "Dummy" is "https://schema.org/name"
     And the value of the node "hydra:property.@type" of the property "name" of the Hydra class "Dummy" is "rdf:Property"
-    And the value of the node "hydra:property.rdfs:label" of the property "name" of the Hydra class "Dummy" is "name"
+    And the value of the node "hydra:property.label" of the property "name" of the Hydra class "Dummy" is "name"
     And the value of the node "hydra:property.domain" of the property "name" of the Hydra class "Dummy" is "#Dummy"
     And the value of the node "hydra:property.range" of the property "name" of the Hydra class "Dummy" is "xmls:string"
     And the value of the node "hydra:property.range" of the property "relatedDummy" of the Hydra class "Dummy" is "https://schema.org/Product"
@@ -74,14 +73,16 @@ Feature: Documentation support
     And the value of the node "@type" of the operation "GET" of the Hydra class "Dummy" contains "hydra:Operation"
     And the value of the node "@type" of the operation "GET" of the Hydra class "Dummy" contains "schema:FindAction"
     And the value of the node "hydra:method" of the operation "GET" of the Hydra class "Dummy" is "GET"
-    And the value of the node "hydra:title" of the operation "GET" of the Hydra class "Dummy" is "Retrieves a Dummy resource."
-    And the value of the node "rdfs:label" of the operation "GET" of the Hydra class "Dummy" is "Retrieves a Dummy resource."
+    And the value of the node "hydra:title" of the operation "GET" of the Hydra class "Dummy" is "getDummy"
+    And the value of the node "hydra:description" of the operation "GET" of the Hydra class "Dummy" is "Retrieves a Dummy resource."
     And the value of the node "returns" of the operation "GET" of the Hydra class "Dummy" is "Dummy"
-    And the value of the node "hydra:title" of the operation "PUT" of the Hydra class "Dummy" is "Replaces the Dummy resource."
-    And the value of the node "hydra:title" of the operation "DELETE" of the Hydra class "Dummy" is "Deletes the Dummy resource."
+    And the value of the node "hydra:title" of the operation "PUT" of the Hydra class "Dummy" is "putDummy"
+    And the value of the node "hydra:description" of the operation "PUT" of the Hydra class "Dummy" is "Replaces the Dummy resource."
+    And the value of the node "hydra:description" of the operation "DELETE" of the Hydra class "Dummy" is "Deletes the Dummy resource."
+    And the value of the node "hydra:title" of the operation "DELETE" of the Hydra class "Dummy" is "deleteDummy"
     And the value of the node "returns" of the operation "DELETE" of the Hydra class "Dummy" is "owl:Nothing"
     # Deprecations
     And the boolean value of the node "owl:deprecated" of the Hydra class "DeprecatedResource" is true
     And the boolean value of the node "hydra:property.owl:deprecated" of the property "deprecatedField" of the Hydra class "DeprecatedResource" is true
-    And the boolean value of the node "owl:deprecated" of the property "The collection of DeprecatedResource resources" of the Hydra class "The API entrypoint" is true
+    And the boolean value of the node "owl:deprecated" of the property "getDeprecatedResourceCollection" of the Hydra class "Entrypoint" is true
     And the boolean value of the node "owl:deprecated" of the operation "GET" of the Hydra class "DeprecatedResource" is true

features/hydra/error.feature

@@ -37,9 +37,9 @@ Feature: Error handling
     And the JSON should be equal to:
     """
     {
-          "@context": "/contexts/ConstraintViolationList",
+          "@context": "/contexts/ConstraintViolation",
           "@id": "/validation_errors/c1051bb4-d103-4f74-8988-acbcafc7fdc3",
-          "@type": "ConstraintViolationList",
+          "@type": "ConstraintViolation",
           "status": 422,
           "violations": [
               {

features/main/crud.feature

@@ -60,6 +60,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -100,13 +101,14 @@ Feature: Create-Retrieve-Update-Delete
   Scenario: Get a not found exception
     When I send a "GET" request to "/dummies/42"
     Then the response status code should be 404
+    And the header "Content-Location" should not exist
 
   Scenario: Get a collection
     When I send a "GET" request to "/dummies"
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
-    And the header "Content-Location" should be equal to "/dummies.jsonld"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -616,6 +618,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
       {
@@ -640,6 +643,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
       {
@@ -657,6 +661,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -676,6 +681,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -718,6 +724,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -737,6 +744,7 @@ Feature: Create-Retrieve-Update-Delete
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {

features/main/crud_abstract.feature

@@ -35,6 +35,7 @@ Feature: Create-Retrieve-Update-Delete on abstract resource
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be equal to:
     """
     {
@@ -52,6 +53,7 @@ Feature: Create-Retrieve-Update-Delete on abstract resource
     Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/ld+json; charset=utf-8"
+    And the header "Content-Location" should not exist
     And the JSON should be valid according to this schema:
     """
     {