strudwick

One of the things which I absolutely love about ApiPlatform is its deep integration with Mercure and all the real time stuff which just works. My issue this week was, the server was Apache… and I could not just copy/paste from the docs. Here is what worked as our final setup: JWT_KEY=’!ChangeMe!’ CORS_ALLOWED_ORIGINS=* ADDR=’localhost:3000′ /home/mercure/mercure …

Continue reading “Mercure with Apache”

There are 4 security go-tos I use in my ApiPlatform projects. I’ll describe them below Use only needed endpoints Entities will automatically make all the usual endpoints. But sometimes thats a bit too much. Take a look at https://symfonycasts.com/screencast/api-platform/operations and see how you can get rid of the points you won’t use. Don’t want to …

Continue reading “ApiPlatform and my security go-tos”

This was an interesting one for me. It took me quite a while to clearly get the private subscriptions. Here is what it was in the end: AuthenticationSuccessListener public function onAuthenticationSuccessResponse(AuthenticationSuccessEvent $event): void { $data = $event->getData(); $user = $event->getUser(); if (!$user instanceof User) { return; } $token = (new Builder()) ->withClaim(‘mercure’, [‘subscribe’ => $user->getMercureIri()]) …

Continue reading “Api-platform and Mercure”