| # |
Apr 24th 2017, 10:02 |
 birdy247 |
:+1: |
| # |
Apr 24th 2017, 10:02 |
Neon1024 |
If you happened to have a security hole, I could suck your database dry |
| # |
Apr 24th 2017, 10:01 |
birdy247 |
ah right |
| # |
Apr 24th 2017, 10:01 |
Neon1024 |
Making it very easy for me to automatically hit every record in your database |
| # |
Apr 24th 2017, 10:01 |
Neon1024 |
Well if it’s public Birdy, and you’re urls are something like example.com/api/v1/secrets/2 it’s safe to assume that example.com/api/v1/secret/3 will be a something as well |
| # |
Apr 24th 2017, 09:49 |
birdy247 |
Neon1024 you mentioned to hide primary keys in any responses |
| # |
Apr 24th 2017, 09:45 |
hagen00 |
sorry, will delete, it does work. I had a template error |
| # |
Apr 24th 2017, 09:45 |
birdy247 |
the resource |
| # |
Apr 24th 2017, 09:44 |
birdy247 |
Neon1024 got it :slightly_smiling_face: |
| # |
Apr 24th 2017, 09:43 |
Neon1024 |
https://crud.readthedocs.io/en/latest/listeners/jsonapi.html |
| # |
Apr 24th 2017, 09:42 |
Neon1024 |
https://github.com/FriendsOfCake/crud/blob/master/src/Listener/JsonApiListener.php |
| # |
Apr 24th 2017, 09:42 |
Neon1024 |
https://book.cakephp.org/3.0/en/development/routing.html#resource-routes |
| # |
Apr 24th 2017, 09:41 |
birdy247 |
api/v1/events/add with POST does add a new event |
| # |
Apr 24th 2017, 09:41 |
birdy247 |
instead if gives a list of events |
| # |
Apr 24th 2017, 09:41 |
birdy247 |
api/v1/events with POST does not add a new record |
| # |
Apr 24th 2017, 09:40 |
birdy247 |
api/v1/events with GET gives a list of events |
| # |
Apr 24th 2017, 09:38 |
birdy247 |
any ideas? |
| # |
Apr 24th 2017, 09:35 |
birdy247 |
rather than anyting to suggest its trying to add a new record |
| # |
Apr 24th 2017, 09:35 |
birdy247 |
but I always get back a list of results |
| # |
Apr 24th 2017, 09:35 |
birdy247 |
I am using POST |
| # |
Apr 24th 2017, 09:34 |
birdy247 |
I am trying to ADD a record via my API |
| # |
Apr 24th 2017, 09:06 |
theaxiom |
Yo dawg |
| # |
Apr 24th 2017, 09:06 |
theaxiom |
Maybe I will use both, haha |
| # |
Apr 24th 2017, 09:05 |
Neon1024 |
Well core team recently switched from Coveralls to CodeCov for what it’s worth |
| # |
Apr 24th 2017, 09:05 |
theaxiom |
Which is better, codecov or coveralls? |
| # |
Apr 24th 2017, 09:03 |
Neon1024 |
But #minor |
| # |
Apr 24th 2017, 09:03 |
Neon1024 |
Sometimes index templates are missing associations |
| # |
Apr 24th 2017, 09:03 |
Neon1024 |
The RelatedModelsListener needs a little love though imho |
| # |
Apr 24th 2017, 09:03 |
theaxiom |
You can also override the methods and then pass back to CRUD when you are done hi-jacking the event. |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
s/event/exception |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
Otherwise crud can’t catch the missing method event |
| # |
Apr 24th 2017, 09:02 |
birdy247 |
perfrcto for an API! |
| # |
Apr 24th 2017, 09:02 |
birdy247 |
sweet |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
Yep, just without any methods |
| # |
Apr 24th 2017, 09:02 |
theaxiom |
https://socialplex.us is built entirely using the CRUD plugins, including crud-users and crud-view as well as bootstrap-ui |
| # |
Apr 24th 2017, 09:02 |
birdy247 |
I still have to make a controller though right? |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
Which is what I did for my API |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
You can write your own Crud action class |
| # |
Apr 24th 2017, 09:02 |
Neon1024 |
If you really really want to re-use some bespoke stuff |
| # |
Apr 24th 2017, 09:01 |
Neon1024 |
I’ve only found a few cases where I’ve needed to |
| # |
Apr 24th 2017, 09:01 |
birdy247 |
:) |