- Add firewall protection to the
/addess-book
and/me
routes in thesecurity.yaml
access_control:
- { path: "%sylius_shop_api.security.regex%/address-book", role: ROLE_USER}
- { path: "%sylius_shop_api.security.regex%/me", role: ROLE_USER}
- The forgot password function now doesn't return an error if the user with this email is not found. It might give a potential attacker information about which users are registered in the shop.
- Add proper constraint to composer.json
{
"require": {
"sylius/shop-api-plugin": "^1.0"
}
}
- Run
composer update
- The following files changed their namespaces and folders:
src/Factory/Taxon/ImageViewFactory.php
->src/Factory/ImageViewFactory.php
src/Factory/Taxon/ImageViewFactoryInterface.php
->src/Factory/ImageViewFactoryInterface.php
src/View/Taxon/ImageView.php
->src/View/ImageView.php
Because these classes are used outside of Taxon context as well.
- Path of images is served as absolute instead of relative.
-
The configuration key for the shop api is now
sylius_shop_api
. -
Plugin name has been changed from
ShopApiPlugin
toSyliusShopApiPlugin
. As a result all resources which were loaded with this prefix:@ShopApiPlugin
should be prefixed with@SyliusShopApiPlugin
-
The route names of the address book and the order are now renames to fit the schema
sylius_shop_api...
-
The commands have been moved to the appropriate directories depending on the context.
-
The requests have been moved to the appropriate directories depending on the context.
-
The views have been moved to the appropriate directories depending on the context.
- This might require changing the serializer settings in your application
-
Tactician has been replaced with Symfony Messenger.
- Used
League\Tactician\CommandBus
has been replaced withSymfony\Component\Messenger\MessageBusInterface
- The commands are now dispatched using
dispatch()
method instead ofhandle()
- The method name in handlers has been changed from
handle()
to__invoke()
- Used
-
The product routes have been changed:
Old Route New route products/{code}
products/by-code/{code}
products-by-slug/{slug}
products/by-slug/{slug}
products/{code}/reviews
products/by-code/{code}/reviews
products-reviews-by-slug/{slug}
products/by-slug/{slug}/reviews
taxon-products/{code}
taxon-products/by-code/{taxonCode}
taxon-products-by-slug/{taxonSlug}
taxon-products/by-slug/{taxonSlug}
product/by-slug/{slug}/reviews
products/by-slug/{slug}/reviews
-
The channel code has been removed from routes:
Old Route New route {channelCode}/address-book/*
address-book/*
{channelCode}/carts/*
carts/*
{channelCode}/checkout/*
checkout/*
{channelCode}/me
me
{channelCode}/orders/*
orders/*
{channelCode}/password-reset/*
password-reset/*
{channelCode}/product-latest
product-latest
{channelCode}/products/*
products/*
{channelCode}/register
orders/*
{channelCode}/request-password-reset
request-password-reset
{channelCode}/resend-verification-link
resend-verification-link
{channelCode}/verify-account
verify-account
{channelCode}/taxon-products/*
taxon-products/*
{channelCode}/taxons/*
taxons/*
-
The channel code has been added as a second argument to
AddProductReviewByCodeRequest
,AddProductReviewBySlugRequest
,ResendVerificationTokenRequest
andRegisterCustomerRequest
classes. -
The argument in constructor of
PickupCartRequest
class has been changed fromRequest $request
tostring channelCode
. -
The address-book create route has been changed :
Old Route New route address-book
address-book/
-
Customer registration payload changed:
{ - "user": { - "plainPassword": { - "first": "foobar", - "second": "foobar" - } - } + "plainPassword": "foobar", + "channel": "CHANNEL_CODE" }