Skip to content

Setup: ApiProxy

dante di domenico edited this page Jul 24, 2025 · 1 revision

Edit configuration

ApiProxy configuration is used to allow or block specific API endpoints methods.

You can decide which methods are allowed or blocked per endpoint. Default is to trust methods by /api/home response, considering hints.allow values.

Set ApiProxy in config/app_local.php (or in config/projects/<projectName>.php if you use multi project configuration).

Example for php file:

'ApiProxy' => [
     'allowed' => [
         'products' => ['GET', 'POST', 'PATCH', 'DELETE'],
     ],
     'blocked' => [
         'objects' => ['GET', 'POST', 'PATCH', 'DELETE'],
         'users' => ['GET', 'POST', 'PATCH', 'DELETE'],
     ],
],

Clone this wiki locally