restful 7.x-2.17

Security update
Unsupported

This covers sa-core-2019-003 on RESTful module for 7.x-2.x

restful 7.x-1.10

Security update
Unsupported

This covers sa-core-2019-003 on RESTful module for 7.x-1.x

restful 7.x-1.8

Security update
Insecure
Unsupported

Fixes RESTful - Moderately Critical - Access Bypass - SA-CONTRIB-2017-018

7420a34 by Mateu Aguiló Bosch (G)

:100644 100644 7e149f5... 2f24549... M	modules/restful_token_auth/restful_token_auth.module
:100644 100644 fceaef6... 5af69bf... M	modules/restful_token_auth/tests/RestfulTokenAuthenticationTestCase.test
:100644 100644 0c09d1d... 16275da... M	plugins/authentication/RestfulAuthenticationManager.php

restful 7.x-1.7

Bug fixes
Insecure
Unsupported

Add the option to use dash instead of underscore on the key name

f1f2bd4 by Or (N)

:100644 100644 ce1b119... 764c87b... M	modules/restful_token_auth/plugins/authentication/RestfulAuthenticationToken.class.php
:100644 100644 f8ded3f... fceaef6... M	modules/restful_token_auth/tests/RestfulTokenAuthenticationTestCase.test

[BUGFIX] Add 204 status code for HTTP DELETE method

9d2f9be by edward.xu (G)

Make the 204 status code to successfully show up in the response.

restful 7.x-2.16

Security update
Insecure
Unsupported

Fixes RESTful - Moderately Critical - Access Bypass - SA-CONTRIB-2017-018

3d5e7e7 by Mateu Aguiló Bosch (G)

:100644 100644 7509d01... 1b24e28... M	modules/restful_token_auth/restful_token_auth.module
:100644 100644 f2a4200... eb09f48... M	modules/restful_token_auth/tests/RestfulTokenAuthenticationTestCase.test
:100644 100644 447c317... c97b76b... M	src/Authentication/AuthenticationManager.php

restful 7.x-2.15

Bug fixes
Insecure
Unsupported

Fix typo in watchdog name

2414c27 by Amitai Burstein (N)

:100644 100644 df63ebd... 7509d01... M modules/restful_token_auth/restful_token_auth.module

restful 7.x-2.14

Insecure
Unsupported

[CLEANUP] Clean a documentation typo (#959)

fc74480 by Bhushan Nagaonkar (N)

Array index is wrong in the query formation example.
:100644 100644 0602504... 24e5a0d... M docs/api_url.md

[CLEANUP] Improve documentation for "Consuming your API"

2db989f by Benji Fisher (N)

:100644 100644 a5c3ca6... 0602504... M docs/api_url.md

restful 7.x-2.13

New features
Insecure
Unsupported

[FEATURE] Add OAuth2 authentication provider (#942)

b5f7179 by hussainweb (N)

Integrate with the OAuth2 server module to allow authorization using this method.

:000000 100644 0000000... 7b381d0... A	src/Plugin/authentication/OAuth2ServerAuthentication.php

[FEATURE] Allow getting resource name from resource manager (#940)

101acd6 by hussainweb (N)

restful 7.x-2.12

Bug fixes
Insecure
Unsupported

[BUGFIX] Return an array in DataProviderDbQuery.php (#935)

66c4cc6 by jeff-h (N)

Data providers' `create()` method must return an array.

:100644 100644 8c7da11... 56c2ae8... M	src/Plugin/resource/DataProvider/DataProviderDbQuery.php

restful 7.x-2.11

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Remove a pagination warning

d2b4a14 by Mateu Aguiló Bosch (G)

When the new pagination parameter comes back empty.

:100644 100644 d377997... 1d2a8ac... M	src/Plugin/resource/DataProvider/DataProvider.php

[FEATURE] Cache the already embedded content

a9d0cc4 by Mateu Aguiló Bosch (G)

If two entities of the top resource point to the same entity, then
it's embedded twice. For performance reasons we want to calculate
it once and cache the result througout the request.

restful 7.x-2.10

Bug fixes
New features
Insecure
Unsupported

[FEATURE] Support JSON API friendly parameters (#924)

b5f3cf3 by Mateu Aguiló Bosch (N)

And have better JSON API compliance.

restful 7.x-2.9

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Better compound ID getter to fix targetted filters (#906)

6db0cbd by Mateu Aguiló Bosch (N)

Fix the targetted filters when using JSON API.

:100644 100644 6c5562b... 3f45095... M	src/Plugin/resource/Field/ResourceFieldEntity.php
:100644 100644 f13009d... ea8bbb8... M	tests/RestfulForbiddenItemsTestCase.test

[FEATURE] Allow joining queries for filters on a target column (#893)

2f57807 by Mateu Aguiló Bosch (N)

restful 7.x-2.8

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Revert plugin massaging

ebfbca2 by Mateu Aguiló Bosch (G)

It was done elsewhere.

:100644 100644 54e38da... 1e203a7... M	src/Resource/ResourceManager.php

[BUGFIX] Allow NULL plugins to be massaged

8c0842b by Mateu Aguiló Bosch (G)

:100644 100644 c0c52ba... 54e38da... M	src/Resource/ResourceManager.php

[FEATURE] Allow custom resouce field classes to alter queries

504c518 by Mateu Aguiló Bosch (G)

restful 7.x-2.7

Bug fixes
New features
Insecure
Unsupported

[FEATURE] Switch user during RESTful execution

eadbca2 by Mateu Aguiló Bosch (G)

Allow other code to rely on the global $user object when reacting
to a RESTful thread execution.

restful 7.x-2.6

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Use correct range in pagination when exceeding max

6b80e32 by Mateu Aguiló Bosch (G)

When a range is passed via query string parameter, the correct
pagination links should be calculated. Even if the passed range
exceeds the maximum allowed range.

restful 7.x-2.5

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Avoid warning for invalid filters

cbcaa48 by Mateu Aguiló Bosch (G)

When an invalid filter is provided, throw the appropriate error and
avoid additional warnings.

:100644 100644 04f1baf... 01d079b... M  src/Plugin/resource/DataProvider/DataProvider.php

[FEATURE] Detach render cache clear from cache flushes

c5886a3 by Mateu Aguiló Bosch (G)

Render caches are robust enough to not depend on TTLs or other time
based processes.

restful 7.x-2.4

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Allow OPTIONS requests with access token

2cdf7aa by Mateu Aguiló Bosch (G)

Add the OPTIONS HTTP method to the allowed methods

:100644 100644 f552044... 7782658... M  modules/restful_token_auth/src/Plugin/resource/AccessToken__1_0.php

[FEATURE] Performance improvements

c2d0a50 by Mateu Aguiló Bosch (G)

Add minor improvements to methods that are called a lot. A small
bit can add up when called tens of thousands of times.

restful 7.x-2.3

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Avoid INNER JOIN for LEFT JOIN filters

fa5205c by Mateu Aguiló Bosch (G)

If the first field condition (alphabetically) is a LEFT JOIN filter,
make sure that subsequent fields do not join to it with an INNER
JOIN.

:100644 100644 9f2f944... c47114a... M	src/Plugin/resource/DataProvider/DataProvider.php
:100644 100644 adb10cb... 85a8340... M	src/Util/EntityFieldQuery.php

[BUGFIX] Better support for forbidden entities

7c956e5 by Mateu Aguiló Bosch (G)

restful 7.x-2.2

Bug fixes
New features
Insecure
Unsupported

[BUGFIX] Remove cache fragments during shutdown

b2d1b33 by Mateu Aguiló Bosch (G)

When an entity is updated or deleted we need to clear caches and
remove the cache fragments. The problem is that depending on the
site configuration, that operation may be affected for a rolling
back transaction. Defer the clearing to the shutdown instead.

restful 7.x-1.5

Bug fixes
New features
Insecure
Unsupported

[CLEANUP] Improve documentation for access-token

f40337c by Kevin Porras (G)

Add header alternative for the access token.

:100644 100644 ccafba3... 5a5447b... M	docs/api_url.md

[CLEANUP] Modify comments on inherited properties to use inheritdoc

9919794 by hw (G)

Make the docblocks in the custom exceptions to inherit from the
parent exception type.

restful 7.x-2.1

Bug fixes
Insecure
Unsupported

[BUGFIX] Remove the deprecated dependency ui-select2

fcaa5d5 by Kevin Porras (G)

Instead use the maintained project of ui-select for the angular
frontend example.

:100644 100644 782b973... a5c3ca6... M  docs/api_url.md

[CLEANUP] Modify comments on inherited properties to use inheritdoc

360bbdf by hw (G)

Make the docblocks in the custom exceptions to inherit from the
parent exception type.

restful 7.x-2.0

New features
Insecure
Unsupported

[CLEANUP] Port Auth token tests to 2.x

26dbca9 by Mateu Aguiló Bosch (G)

Add the auth token tests to the test suite.

restful 7.x-2.0-beta3

Bug fixes
New features
Insecure
Unsupported

[FEATURE] Record last-access time for users

1c1927e by Mateu Aguiló Bosch
When a user's account is loaded, the user table should be updated
to indicate that they have made an authenticated request. This
mirrors the logic in _drupal_session_write().

[BUGFIX] Allow updates with NULL values

4b11b84 by Mateu Aguiló Bosch
Make sure that you can set NULL value via PUT and PATCH.

restful 7.x-2.0-beta2

Bug fixes
Insecure
Unsupported

[BUGFIX] Fix the resource plugin reference

d178aa2 by Mateu Aguiló Bosch
So the cache placeholder population can load the plugin.

[BUGFIX] Re-add links to individual items in listings

10d6deb by Mateu Aguiló Bosch
Add self link to every individual item in a listing.

restful 7.x-2.0-beta1

Bug fixes
New features
Insecure
Unsupported

RESTful 2.x is a major rewrite that comes with lots of improvements in DX, new features and bug fixes.

restful 7.x-1.4

Bug fixes
New features
Insecure
Unsupported

[CLEANUP] Fix watchdog resource's class name

c31a950 by jeff-h
Correct a typo in the class name with a misplaced capital F.

[FEATURE] Update user's access time when authenticating

797dc60 by Luke Wertz
When a user makes an authenticated request, update the access time
on the user object. Just like core does.

restful 7.x-1.3

Security update
Insecure
Unsupported

RESTful - Moderately Critical - Access bypass - SA-CONTRIB-2015-147

[BUGFIX] Prevent page cache poisoning

67a32c0 by Mateu Aguiló Bosch
Prevent page cache poisoning when using authentication providers
that are not session cookie based.

See RESTful - Moderately Critical - Access bypass - SA-CONTRIB-2015-147.

restful 7.x-1.2

Bug fixes
Insecure
Unsupported

[CLEANUP] Fix documentation in checkEntityAccess

b298b78 by heylookalive
Add the missing 'view' operation.

[CLEANUP] Document the use of the Accept header

5e366d8 by Theodoros Ploumis
Add documentation on content type negotiation based on the Accept
header.

[BUGFIX] Wrong query for propertyCondition in RestfulDataProviderEFQ

3d5734a by ordavidil
Support IN and BETWEEN operators for property filters.

restful 7.x-1.1

Bug fixes
New features
Insecure
Unsupported
  • [FEAT] (Entity) #499: Support node reference (by Tyler Struyk)
  • [REFACTOR] (Cache) #535: Cache tags to its method (by Christian Sieber)
  • [BUGFIX] (DB Query) #540: Refactor view code (by Mohammed Nauage)
  • [DOCS] #574: Better documentation at restful.admin.inc (by Theodoros Ploumis)
  • [DOCS] #575: Update api_url.md (by Theodoros Ploumis)
  • [BUGFIX] Improve filtering by adding some missing operators (by ordavidil)
  • [BUGFIX] #539: Checking property settings only after setting the value (by Amitai Burstein)

restful 7.x-1.0-rc1

Bug fixes
New features
Insecure
Unsupported

First release candidate for RESTful

Subscribe with RSS Subscribe to Releases for RESTful