Invalid identifier value or configuration. api plateform - symfony

Question

I need to reset password user with api plateform. I have create custom endpoint :
itemOperations: [
'sendEmail' => [
'method' => 'patch',
'path' => '/users/password/send/token',
'controller' => ResetPasswordRequestsController::class,
'normalization_context' => ['groups' => [
'read:sendEmail:user:item',
]],
],
]
In my controller search user with email and create token for reset passeword.
When i send my request i got a error : "Invalid identifier value or configuration." :
PATH : http://192.168.0.11:8000/api/users/password/send/token
{
"email": "user#email.com"
}
I think Api plateform need a id of my entity User with PATCH method but i send only email.
User Entty attributs
class User implements UserInterface
{
/**
* #ORM\Id
* #ORM\GeneratedValue
* #ORM\Column(type="integer")
*/
private $id;
/**
* #ORM\Column(type="string", length=180, unique=true)
* #Assert\NotBlank(groups={"sendEmail"})
*/
private $email;
/**
* #ORM\Column(type="json")
*/
private $roles = [];
/**
* #var string The hashed password
* #ORM\Column(type="string")
* #Assert\NotBlank
*/
private $password;
/**
* #ORM\Column(type="string", length=255)
* #Assert\NotBlank
*/
private $firstName;
/**
* #ORM\Column(type="string", length=255)
* #Assert\NotBlank
*/
private $lastName;
/**
* #ORM\Column(type="datetime")
*/
private $createdAt;
/**
* #ORM\OneToOne(targetEntity=Teacher::class, mappedBy="user", cascade={"persist", "remove"})
*/
private $teacher;
/**
* #ORM\OneToOne(targetEntity=Student::class, mappedBy="user", cascade={"persist", "remove"})
*/
private $student;
/**
* #ORM\ManyToMany(targetEntity=Role::class, mappedBy="users")
*/
private $dbroles;
/**
* #ORM\OneToMany(targetEntity=Invitation::class, mappedBy="owner")
*/
private $invitations;
/**
* #ORM\OneToMany(targetEntity=Inscription::class, mappedBy="userRegister",cascade={"persist"})
*/
private $inscriptions;
/**
* #ORM\OneToMany(targetEntity=UserInvitation::class, mappedBy="owner")
*/
private $userInvitations;
/**
* #ORM\OneToMany(targetEntity=UserInvitation::class, mappedBy="guest")
*/
private $userInvitationsGuest;
}
my controller :
<?php
namespace App\Controller;
use ApiPlatform\Core\Bridge\Symfony\Validator\Exception\ValidationException;
use App\Entity\User;
use Doctrine\ORM\EntityManagerInterface;
use Exception;
use Symfony\Bridge\Twig\Mime\TemplatedEmail;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Mailer\MailerInterface;
use Symfony\Component\Mime\Address;
use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Validator\Validator\ValidatorInterface;
class ResetPasswordRequestsController extends AbstractController
{
use ResetPasswordControllerTrait;
private $mailer;
private $resetPasswordHelper;
private $passwordEncoder;
public function __construct(ValidatorInterface $validator, MailerInterface $mailer, ResetPasswordHelperInterface $resetPasswordHelper, UserPasswordEncoderInterface $passwordEncoder)
{
$this->mailer = $mailer;
$this->resetPasswordHelper = $resetPasswordHelper;
$this->passwordEncoder = $passwordEncoder;
$this->validator = $validator;
}
public function __invoke(Request $request)
{
$data = $request->get('data');
if($data->getEmail()){
$this->sendEmail($data->getEmail());
}
if($data->getPassword() && $request->get("token")){
$this->resetPassword($data->getPassword(), $request->get("token"));
}
}
public function resetPassword($newPassword, $token){
try {
$user = $this->resetPasswordHelper->validateTokenAndFetchUser($token);
} catch (ResetPasswordExceptionInterface $e) {
$this->addFlash('reset_password_error', sprintf(
'There was a problem validating your reset request - %s',
$e->getReason()
));
return $this->redirectToRoute('app_forgot_password_request');
}
$this->resetPasswordHelper->removeResetRequest($token);
$encodedPassword = $this->passwordEncoder->encodePassword(
$user,
$newPassword
);
$user->setPassword($encodedPassword);
$this->getDoctrine()->getManager()->flush();
// The session is cleaned up after the password has been changed.
$this->cleanSessionAfterReset();
return $user;
}
public function sendEmail($email){
$user = $this->getDoctrine()->getRepository(User::class)->findOneBy([
'email' => $email,
]);
if (!$user) {
return throw new Exception(sprintf("L'utilisateur est introuvable"));
}
try {
$resetToken = $this->resetPasswordHelper->generateResetToken($user);
} catch (ResetPasswordExceptionInterface $e) {
return throw new Exception(sprintf("Erreur lors de la génération du token"));
}
$token = $resetToken->getToken();
$url = $this->getParameter('front_app_url');
$redirectUrl = $url . "/auth/reset/" . $token;
$email = (new TemplatedEmail())
->from(new Address('mouchelet.thomas#gmail.com', 'thomas mouchelet'))
->to($user->getEmail())
->subject('Your password reset request')
->htmlTemplate('reset_password/email.html.twig')
->context([
'resetToken' => $resetToken,
'redirectUrl' => $redirectUrl
])
;
$this->mailer->send($email);
$this->setTokenObjectInSession($resetToken);
return $user;
}
}
EDIT 1 : Not working
thx i have try it
collectionOperations: [
'sendEmail' => [
'write' => false,
'serialize' => false,
'method' => 'post',
'path' => '/users/password/send/token',
'controller' => ResetPasswordRequestsController::class,
],
],
i have try with validations_groups :
collectionOperations: [
'post' => ['validation_groups' => ['Default', 'post:user']],
]
#Assert\NotBlank(groups={"post:user"})
but i have error :
Cannot validate values of type \"null\" automatically. Please provide a constraint.

Answer 1

By default, GET, PUT and PATCH methods needs an identifier.
There is several way to achieve what you want.
The first one is to fallback to a regular Symfony controller. Just declare a new POST endpoint instead of PATCH. The counterpart is that this endpoint won't be visible in the OpenAPI view.
The second one is to switch to a POST operation. POST operation does not need an identifier. Because you don't want to save anything, you could either return a Response from your controller to stop the lifecycle, or disable the WriteListener (and perhaps the SerializeListener as well) :
itemOperations: [
'sendEmail' => [
'write' => false,
'serialize' => false,
'method' => 'post',
'path' => '/users/password/send/token',
'controller' => ResetPasswordRequestsController::class,
'normalization_context' => ['groups' => [
'read:sendEmail:user:item',
]],
],
]
The third one looks like the second, keep your PATCH operation, but disable the ReadListener: 'read' => false. The ReadListener is the part which require an identifier. I guess your controller will receive an array containing only the body of your request.