fix(openapi): not forbidden response on openAPI doc

[vinceAmstoutz]

Q	A
Branch?	3.4
Tickets	Closes #6872
License	MIT

Add OpenAPI documentation for the forbidden responses (see issue #6872 for more details).

[vinceAmstoutz]

@p-pichet This patch should resolve your issue, as shown below:

@soyuka Could you help me with adding tests? I'm encountering some issues with the large OpenApiFactoryTest

[vinceAmstoutz]

A proposal by message from @vincentchalamon to add Forbidden instead of Forbidden: You must meet following condition(s) to access this resource: .... mainly for security reasons.

What is your opinion? @dunglas @soyuka

Did it suit your needs? @p-pichet

[p-pichet]

A proposal by message from @vincentchalamon to add Forbidden instead of Forbidden: You must meet following condition(s) to access this resource: .... mainly for security reasons.

What is your opinion? @dunglas @soyuka

Did it suit your needs? @p-pichet

In first thought, i think forbidden is enough and avoid to display to much but in second tought, i don't know.

By the way, do it work with this case

#[ApiResource(
operations : [], // all endpoints 
security: 'is_granted()' 
)]
class MyResource

[vinceAmstoutz]

A proposal by message from @vincentchalamon to add Forbidden instead of Forbidden: You must meet following condition(s) to access this resource: .... mainly for security reasons.
What is your opinion? @dunglas @soyuka
Did it suit your needs? @p-pichet

In first thought, i think forbidden is enough and avoid to display to much but in second tought, i don't know.

By the way, do it work with this case

#[ApiResource(
operations : [], // all endpoints 
security: 'is_granted()' 
)]
class MyResource

Thanks for your response!

Yes, it should work with your example. I'll add some tests with this scenario to make sure.

Note that all operations are provided by default, adding operations: [] disables all operations.

[p-pichet]

Thanks a lot for the work

[vinceAmstoutz]

Tests DONE ☑️ @soyuka