You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Feature] Web API: роуты logout / forgot-password / reset-password (процессоры уже есть) #422
Пробросить в config/routes/web.php уже существующие процессоры:
POST /api/v1/customer/logout → Processors\Api\Customer\Logout
POST /api/v1/customer/forgot-password → ForgotPassword
POST /api/v1/customer/reset-password → ResetPassword
Проблема, которую решает
REST/headless клиент не может завершить сессию (#409) и восстановить пароль без MODX connector/legacy. Процессоры реализованы, маршрутов нет — мёртвый код с точки зрения публичного API.
Предлагаемое решение
Closures по образцу login/register в web.php, с корректными HTTP-кодами (см. #414) и rate-limit на forgot/reset.
Альтернативные варианты
Вызывать процессоры напрямую через connector — ломает единый Web API entrypoint api.php.
Activity
fix(web-api): rate-limit reset-password per IP and token
refactor(web-api): thin auth routes and router-only auth test
refactor(web-api): single customerAuth factory in route group
test(web-api): functional coverage for customer auth endpoints
feat(web-api): expose customer logout and password recovery routes
fix(web-api): rate-limit reset-password per IP and token
refactor(web-api): thin auth routes and router-only auth test
refactor(web-api): single customerAuth factory in route group
test(web-api): functional coverage for customer auth endpoints
feat(web-api): expose customer logout and password recovery routes
fix(web-api): rate-limit reset-password per IP and token
refactor(web-api): thin auth routes and router-only auth test
27 remaining items
fix(test): align TokenSessionRevokePolicyTest with auth controller ro…
feat(web-api): expose customer logout and password recovery routes
fix(web-api): rate-limit reset-password per IP and token
refactor(web-api): thin auth routes and router-only auth test
refactor(web-api): single customerAuth factory in route group
test(web-api): functional coverage for customer auth endpoints
fix(test): align TokenSessionRevokePolicyTest with auth controller ro…
feat(web-api): expose customer logout and password recovery routes
fix(web-api): rate-limit reset-password per IP and token
refactor(web-api): thin auth routes and router-only auth test
refactor(web-api): single customerAuth factory in route group
test(web-api): functional coverage for customer auth endpoints
fix(test): align TokenSessionRevokePolicyTest with auth controller ro…
feat(web-api): customer logout and password recovery routes (modx-pro…