Security for Ressources

[ZansDaus]

Hello,
i want to secure my API. Unfortunately the documentation for Security is missing.
Can someone show me some Examples or help me here?

Thanks!

[klamparski]

Hi @ZansDaus,

You can restrict access inside endpoint configuration, as on example below:

use SourceBroker\T3api\Annotation as T3api;

* @T3api\ApiResource(
*     collectionOperations={
*          "post"={
*              "path"="/comments",
*              "method"="POST",
*              "security"="frontend.user.isLoggedIn",
*          },
*     },
* )
class Comment extends \TYPO3\CMS\Extbase\DomainObject\AbstractEntity
{
}

Inside security you can use all the TYPO3's conditions using Symfony expression language and write your custom ones