Is JWT authentication configuration included?

Yes, it includes standard configuration snippets for securing API firewalls using JWT in the security.yaml configuration.

How does this skill handle complex authorization logic?

It utilizes Symfony Voters, allowing you to centralize and reuse complex logic based on specific attributes and objects across your API.

How do I handle security based on input data sent in a request?

It covers security post-denormalization, which evaluates access rights after input data is bound to the object but before it is persisted.

Does it support filtering lists based on the logged-in user?

Absolutely, it includes templates for Doctrine extensions that automatically filter collections and items so users only see data they are authorized to access.

Can I secure individual fields in my API responses?

Yes, the skill provides patterns for property-level security using serialization groups and dynamic context builders to hide or show fields based on user roles.

Symfony API Platform Security

Name: Symfony API Platform Security
Author: MakFly

byMakFly

•

Security & Testing

Secures Symfony API Platform resources using operation-level access control, custom voters, and data-driven security expressions.

This skill empowers developers to implement robust security architectures within Symfony API Platform projects by providing comprehensive patterns for managing access at the operation, collection, and property levels. It covers essential security implementations including PHP security expressions, integration with Symfony Voters for complex logic, and Doctrine extensions for secure data filtering. It is an indispensable resource for building production-ready, multi-tenant, or role-based APIs where data privacy and granular access control are critical requirements.

Key Features

0121 GitHub stars

02Granular property-level security via serialization groups

03Dynamic collection filtering using Doctrine ORM extensions

04Custom Symfony Voter integration for complex authorization

05Operation-level access control using PHP attributes

06Post-denormalization security checks for data-dependent rules

Use Cases

01Building a multi-tenant API where users can only access their own resources

02Securing specific API fields based on user roles or resource ownership

03Implementing administrative dashboards with restricted resource deletion and modification

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add makfly/superpowers-symfony api-platform-security

For use in Claude.ai and ChatGPT

Download Skill