Showing ideas with label API.
Show all ideas
While there are multiple threats a modern Magento application faces, one of the weakest from a security standpoint is the ability to run arbitrary commands without application level authentication via the command line. It seems to me the bin/magento command should require a user to be authenticated with the Magento application prior to execution of a command for a fully installed system. Whether that is achieved via user/pass or other method is up for discussion, just as long as the CLI was treated similarly to the web from an authentication point of view. I understand that there are many ways to discount the need for such a feature, but given the power of the bin/magento command (and n98-magerun2) it seems prudent to authenticate (and log) actions. This might be enforced at the framework / API level in order to help shell / CLI commands and n98-magerun inherit the same security stance. Adding additional devdocs / publishing best practices on security hardening a Magento installation would also be nice to see. Thank you for listening, Hardy Johnson Technical Lead Copious, Inc. hardyj@copiousinc.com
... View more
See more ideas labeled with:
-
API
-
platform
Problem is when thirdparty system wanted to update product's inventory then they require to send API call to update each products. So it calls cache flush method everytime that uses too much memory if thirdparty wanted to update 100o skus. So I would suggest if have API call to update stock inventory which accepts skus in batch then it saves CPU memory.
... View more
See more ideas labeled with:
-
API
-
Catalog
In order to display customer data on pages cached in the full page cache (Varnish or built in), the Magento framework and Magento customer module provide a number of related tools that enable this feature. Some details are outlined in the official documentation found at http://devdocs.magento.com/guides/v2.1/config-guide/cache/cache-priv-priv.html Creating such a dynamic section on a cached page requires the use of two interfaces: * Magento\Customer\CustomerData\SectionPoolInterface * Magento\Customer\CustomerData\SectionSourceInterface The interface Magento\Customer\CustomerData\SectionPoolInterface is only referenced in the configuration file etc/frontend/di.xml, but the interface Magento\Customer\CustomerData\SectionSourceInterface has to be implemented in a custom class. These interfaces currently are not marked with the @api annotation. Please add this annotation so the feature can be used in custom modules. This actually also extends to the JavaScript "classes" Magento_Customer/js/customer-data and Magento_Ui/js/lib/core/element/element (a.k.a uiElement). Please also mark these as stable so the feature can be used as described in the documentation. Thank you!
... View more
See more ideas labeled with:
-
API
-
developer
In order to display customer data on pages cached in the full page cache (Varnish or built in), the Magento framework and Magento customer module provide a number of related tools that enable this feature. Some details are outlined in the official documentation found at http://devdocs.magento.com/guides/v2.1/config-guide/cache/cache-priv-priv.html Creating such a dynamic section on a cached page requires the use of two interfaces: * Magento\Customer\CustomerData\SectionPoolInterface * Magento\Customer\CustomerData\SectionSourceInterface The interface Magento\Customer\CustomerData\SectionPoolInterface is only referenced in the configuration file etc/frontend/di.xml, but the interface Magento\Customer\CustomerData\SectionSourceInterface has to be implemented in a custom class. These interfaces currently are not marked with the @api annotation. Please add this annotation so the feature can be used in custom modules. This actually also extends to the JavaScript "classes" Magento_Customer/js/customer-data and Magento_Ui/js/lib/core/element/element (a.k.a uiElement). Please also mark these as stable so the feature can be used as described in the documentation. Thank you!
... View more
See more ideas labeled with:
-
API
-
developer
-
extensions
In some custom modules the IP address of the current visitor is required (e.g. for GeoIp lookups or access control). The class \Magento\Framework\HTTP\PhpEnvironment\RemoteAddress provides this feature, however it is not marked as stable. In order to be able to use the class within third party modules, it would be nice to have a method that is blessed with the @api annotation.
... View more
See more ideas labeled with:
-
API
-
developer