7.x-1.3

[BUGFIX] Prevent page cache poisoning

67a32c0 by Mateu Aguiló Bosch
Prevent page cache poisoning when using authentication providers
that are not session cookie based.

7.x-1.2

[CLEANUP] Fix documentation in checkEntityAccess

b298b78 by heylookalive
Add the missing 'view' operation.

[CLEANUP] Document the use of the Accept header

5e366d8 by Theodoros Ploumis
Add documentation on content type negotiation based on the Accept
header.

[BUGFIX] Wrong query for propertyCondition in RestfulDataProviderEFQ

3d5734a by ordavidil
Support IN and BETWEEN operators for property filters.

7.x-1.1

• [FEAT] (Entity) #499: Support node reference (by Tyler Struyk)
• [REFACTOR] (Cache) #535: Cache tags to its method (by Christian Sieber)
• [BUGFIX] (DB Query) #540: Refactor view code (by Mohammed Nauage)
• [DOCS] #574: Better documentation at restful.admin.inc (by Theodoros Ploumis)
• [DOCS] #575: Update api_url.md (by Theodoros Ploumis)
• [BUGFIX] Improve filtering by adding some missing operators (by ordavidil)
• [BUGFIX] #539: Checking property settings only after setting the value (by Amitai Burstein)
• [BUGFIX] #495: Prevent preceding comma in Vary header (by Peter Sieg)
• [BUGFIX] #522: Add watchdog entry if excpetion was thrown (by Amitai Burstein)
• [DOCS] #527: Add documentation for adding a sort property using a URL parameter (by edhollinghurst)
• [DOCS] Update README.md (by Mateu Aguiló Bosch)
• [BUGFIX] #519: Add try catch on menu item access (by Amitai Burstein)
• [BUGFIX] #517: Don't delete cache when its not set (by mojzis)
• [DOCS] #503: Add Clarification to articles.inc (by Tyler Struyk)
• [BUGFIX] Generate access token and refresh token for correct users (by edward xu)

Wiggly Wolf (7.x-1.0)

 _       ______________________  __   _       ______  __    ______
| |     / /  _/ ____/ ____/ /\ \/ /  | |     / / __ \/ /   / ____/
| | /| / // // / __/ / __/ /  \  /   | | /| / / / / / /   / /_    
| |/ |/ // // /_/ / /_/ / /___/ /    | |/ |/ / /_/ / /___/ __/    
|__/|__/___/\____/\____/_____/_/     |__/|__/\____/_____/_/       

Bug fixes:

• #446 Incorrect filename for ctools plugin in README : fix plugin file name. @nyl-auster
• #448 Remove semicolon. @EdwardAA
• #457: Support autocomplete when bundle plugin property is ommitted @chasingmaxwell
• #456: Only call prepareRow if $row is an array. @chasingmaxwell

New features:

• #449 Add support for commerce_product and commerce_line_item. @EdwardAA
• #451 Pipe the account to the sub-request
• #466: php://input can only be read once @thebruce

Credit for #355 to @steve.turnbull as well.

Old Okapi (7.x-1.0-rc5)

   ____  __    ____     ____  __ __ ___    ____  ____
  / __ \/ /   / __ \   / __ \/ //_//   |  / __ \/  _/
 / / / / /   / / / /  / / / / ,<  / /| | / /_/ // /  
/ /_/ / /___/ /_/ /  / /_/ / /| |/ ___ |/ ____// /   
\____/_____/_____/   \____/_/ |_/_/  |_/_/   /___/   

This release comes with some bugfixes and new features:

• Typo in method name \RestfulDataProviderEFQ::isValidConjuctionForFilter #392 by @mateu-aguilo-bosch
• defaultSort fails with custom resource properties returns SQL error #385 by @mateu-aguilo-bosch
• Allow filtering column for a query with joins #397 by @amitaibu
• Filtering nodes as anonymous user #295 by @mateu-aguilo-bosch
• Set json to be the default formatter on admin page #409 by @amitaibu
• hal _links supplied by additionalHateoas() in hal JSON formatter is overwritten by addHateoas #415 by @thebruce
• Switch global user by user authenticated by RESTful #410 by @amitaibu 🎆
• Support for field collections #438 by @kzoltan
• User resource not appearing in node JSON #355 by @adaddinsane and @thebruce

Special attention to the new feature introduced in #410 that will allow to do things like accessing private files based on user permissions.

Again, thanks for their contribution to @kzoltan, @adaddinsane and @thebruce. Special thanks to @thebruce for his work on HAL+JSON.

Cultured Cow (7.x-1.0-rc4)

   ________  ____  ________  ______  __________     __________ _       __
  / ____/ / / / / /_  __/ / / / __ \/ ____/ __ \   / ____/ __ \ |     / /
 / /   / / / / /   / / / / / / /_/ / __/ / / / /  / /   / / / / | /| / / 
/ /___/ /_/ / /___/ / / /_/ / _, _/ /___/ /_/ /  / /___/ /_/ /| |/ |/ /  
\____/\____/_____/_/  \____/_/ |_/_____/_____/   \____/\____/ |__/|__/   

This release contains several new features:

• Allow loading entities by any field: #334.
• Inject entityFieldQuery class: #337.
• Allow RestfulDataProviderDbQuery to use a table with a multi-column unique key: #307.
• Add support for multiple filters on the same field: #342.
• Add a 'passthrough' option for public fields: #363.
• Improve variables handling: #196.

And bug fixes:

• Request should be piped to sub-requests: #332.
• Remove recommendation to use HAL+JSON be default: #349.
• \RestfulFormatterHalJson::moveReferencesToEmbeds only works on multiple value fields: #319.
• Can't autocomplete users due to a missing bundle key in the user schema: #351.
• After clean install update db 7100 is pending: #386.
• Fix missing entities returning HTTP 500 instead of a 4XX: #387.

Contributors to this release: @rbran100, @Jelle-S, @RoySegall, @deviantintegral and @rfx1007.

I want to give a special shout out to the new contributors for the time dedication and the polished code. Thanks men!

Valid Viper (7.x-1.0-rc3)

 _    _____    __    ________     _    __________  __________ 
| |  / /   |  / /   /  _/ __ \   | |  / /  _/ __ \/ ____/ __ \
| | / / /| | / /    / // / / /   | | / // // /_/ / __/ / /_/ /
| |/ / ___ |/ /____/ // /_/ /    | |/ // // ____/ /___/ _, _/ 
|___/_/  |_/_____/___/_____/     |___/___/_/   /_____/_/ |_|  

Changes:

• doc restructure
• inject lang to RestfulEntityBase
• Add plugin names to thrown exceptions to make debugging easier
• Set language in constructor of \RestfulBase
• Fixes Issue #317: Check output with Entity Translation enabled.
• Additional hateoas
• add 'configure' key to restful_token_auth.info
• Allow rendering public field with Field API formatter
• Add documentation for rendering view modes.
• Allow rendering entities providing a view mode.
• Allow PER_USER/ PER_ROLE cache garnularity
• Add cache helpers
• Cache invalidation for entities broken with request params.
• Invalidate static caches for all calls using internal API
• Fix PHP code delimiter in README.

Note: In this release we had a couple new contributors:

• @alexweber
• @rfx1007
• @Jelle-S

Melted Moose (7.x-1.0-rc2)

    __  ___________  ________________     __  _______  ____ _____ ______
   /  |/  / ____/ / /_  __/ ____/ __ \   /  |/  / __ \/ __ \ ___// ____/
  / /|_/ / __/ / /   / / / __/ / / / /  / /|_/ / / / / / / \__ \/ __/   
 / /  / / /___/ /___/ / / /___/ /_/ /  / /  / / /_/ / /_/ /__/ / /___   
/_/  /_/_____/_____/_/ /_____/_____/  /_/  /_/\____/\____/____/_____/   

New in this release:

• Allow disabling URL parameters
• More angular refactor
• Refactor angular example
• Set the path and request also for OPTIONS HTTP method
• Missing dependency.
• Add global option for caching resources
• Allow configuring the range (max items per page in listings)
• Verify external caches are working properly ⬅️ ✨

Code changes

Zealous Zebu (7.x-1.0-rc1)

 _____   _________    __   ____  __  _______    _____   __________  __  __
/__  /  / ____/   |  / /  / __ \/ / / / ___/   /__  /  / ____/ __ )/ / / /
  / /  / __/ / /| | / /  / / / / / / /\__ \      / /  / __/ / __  / / / / 
 / /__/ /___/ ___ |/ /___ /_/ / /_/ /___/ /     / /__/ /___/ /_/ / /_/ /  
/____/_____/_/  |_/_____\____/\____//____/     /____/_____/_____/\____/   

First release candidate for RESTful.

This release brings you all the features that you've learned to use so far:

• Generate the output that you want not the one that you can.
• Output whatever data you need, not limited to entities (or even the database).
• Version your API.
• Leverage the built in render cache.
• Prevent flooding using the rate limits.
• Use any output format you can imagine. RESTful comes with JSON and HAL+JSON by default.
• Authenticate your users using any of the available providers (Basic auth, cookie bases and bearer token), or provide your own.
• Have your API discoverable and save yourself from writing outdated docs.
• Upload files, browse users, …