Feature/mbapi

[frwg]

1. The key pair is generated using bin/console lexik:jwt:generate-keypair, with keys stored in application/config/jwt. This directory is excluded from version control via .gitignore and is integrated into the bootstrap command.

2. When merging, ensure the dependent branch on mapbender/mapbender is merged first, then update composer.json and composer.lock to reflect any dependency changes.

3. The JWT token can be obtained by sending authentication data (in JSON format: { "username": "<username>", "password": "<password>" }) to <server_url>/api/login_check.

Example Curl command:

curl -X POST http://mapbender.localhost/api/login_check  -H "Content-Type: application/json"  -d '{"username": "<username>", "password": "<password>"}'`

4. Extend your virtual host configuration according to https://github.com/lexik/LexikJWTAuthenticationBundle/blob/3.x/Resources/doc/index.rst#important-note-for-apache-users

5. The class responsible for handling API requests is located in mapbender/mapbender at application/mapbender/src/Mapbender/CoreBundle/Controller/ApiController.php. Access to endpoints such as <server_url>/api/example or <server_url>/api/my_custom_command is granted through this authentication token.

Example curl command:

curl -X GET -H "Authorization: Bearer <token>" http://mapbender.localhost/api/example

[Phocacius]

the login check creates a html symfony message if the user does not exist, this should not happen in an API and rather return an appropriate error code:

[frwg]

What should the response look like? Simple JSON containing an error code?

[Phocacius]

Yes, HTTP Code 401 should remain and IMO as body something like {"error": "User <username> not found"} is sufficient.