Search
Cancel
Sign In

API Platform Part 2: Security

Go to class
Write Review

API Platform Part 2: Security provided by SymfonyCasts is a comprehensive online course, which lasts for 4-5 hours worth of material. API Platform Part 2: Security is taught by Niels van der Molen. Upon completion of the course, you can receive an e-certificate from SymfonyCasts. The course is taught in Englishand is Paid Course. Visit the course page at SymfonyCasts for detailed price information.

via SymfonyCasts
4-5 hours worth of material
Self Paced
Overview

  • Yep! You ❤️your new API Platform-powered API! It's just missing... well... any type of security! This is a big & important topic, so let's take it head-on in part 2 of our API Platform tutorial:API token security? Or tried-and-true session based login form security?CSRF protection? SameSite Cookies? Ice Cream?Security firewall setup for json_login authenticationAuthorization & roles: restricting access to your operations!Encoding user's password (during user creation/update)API Platform custom data persisterDynamic serialization groups: showing different fields based on the userCustom normalizer for dynamic fields based on userCustom validator to control what data a user can setWoh. Let's do this!

Syllabus

    • 01. Hello API Security + API Docs on Production?
    • 02. API Auth 101: Session? Cookies? Tokens?
    • 03. Login with json_login
    • 04. Authentication Errors
    • 05. Login Success & the Session
    • 06. On Authentication Success
    • 07. Logout & Passing API Data to JS on Page Load
    • 08. SameSite Cookies & CSRF Attacks
    • 09. ApiResource access_control
    • 10. Bootstrapping a Test Suite
    • 11. Backport the API Platform 2.5 Test Tools
    • 12. Api Tests & Assertions
    • 13. Logging in Inside the Test
    • 14. Resetting the Database Between Tests
    • 15. Base Test Class full of Goodies
    • 16. ACL: Only Owners can PUT a CheeseListing
    • 17. ACL & previousObject
    • 18. Access Control & Voters
    • 19. Adding the plainPassword Field
    • 20. Data Persister: Encoding the Plain Password
    • 21. Validation Groups
    • 22. Conditional Field Setup
    • 23. Testing, Updating Roles & Refreshing Data
    • 24. Context Builder & Service Decoration
    • 25. Context Builder: Dynamic Fields/Groups
    • 26. Automatic Serialization Groups
    • 27. Resource Metadata Factory: Dynamic ApiResource Options
    • 28. Dynamic Groups without Caching
    • 29. Custom Normalizer: Object-by-Object Dynamic Fields
    • 30. Diving into the Normalizer Internals
    • 31. A "Normalizer Aware" Normalizer
    • 32. Normalizer & Completely Custom Fields
    • 33. Locking down the CheeseListing.owner Field
    • 34. Custom Validator
    • 35. Security Logic in the Validator
    • 36. Auto-set the Owner: Entity Listener
    • 37. Query Extension: Auto-Filter a Collection
    • 38. Automatic 404 on Unpublished Items
    • 39. Filtering Related Collections

← Prev Next →
0, based on 0 Course votes at GetYourEducation

Start your review of API Platform Part 2: Security

Add review ->
Related courses by Level

ANIMATIONs

Beginner
Provider: Swayam
Language: English

Adobe Lightroom Classic Fundamentals

Beginner
Provider: CreativeLive
Language: English

Build, Train, and Deploy ML Pipelines using BERT

Beginner
Provider: Coursera
Language: English

English for Research Publication Purposes

Beginner
Provider: Coursera
Language: English

English for Research Publication Purposes

Beginner
Provider: Coursera
Language: English

Introduction to Bohemian Watercolor Techniques

Beginner
Provider: Skillshare
Language: English
Browse by subject
Browse by provider
Browse by university
Browse by institution
College Rankings