waaseyaa / routing

v0.1.0-alpha.307 2026-10-21 22:38 UTC

Requires

• php: >=8.5
• symfony/expression-language: ^7.0
• symfony/http-foundation: ^7.0
• symfony/routing: ^7.0
• waaseyaa/access: ^0.1.0-alpha.307
• waaseyaa/auth: ^0.1.0-alpha.307
• waaseyaa/entity: ^0.1.0-alpha.307
• waaseyaa/foundation: ^0.1.0-alpha.307
• waaseyaa/i18n: ^0.1.0-alpha.307
• waaseyaa/user: ^0.1.0-alpha.307

Requires (Dev)

• phpunit/phpunit: ^13.0
• waaseyaa/api: ^0.1.0-alpha.307
• waaseyaa/audit: ^0.1.0-alpha.307
• waaseyaa/database-legacy: ^0.1.0-alpha.307
• waaseyaa/oidc: ^0.1.0-alpha.307

Suggests

• waaseyaa/oidc: Provides optional OpenID Connect issuer routes

GPL-2.0-or-later

Published on Packagist.org on 2026-10-21 23:14 UTC

README

Layer 4 — API

HTTP routing for Waaseyaa applications.

Wraps Symfony Routing with a RouteBuilder fluent API and adds route-level access options (_public, _permission, _role, _gate) evaluated by AccessChecker. Includes language negotiation middleware (UrlPrefixNegotiator, AcceptHeaderNegotiator).

Key classes: RouteBuilder, Router, AccessChecker.

Auth/OIDC metadata adoption

Auth/OIDC route metadata: twelve auth declarations use nonshared explicit handler factories. Optional OIDC declarations use finalized service binding presence, never controller health probes. Missing bindings omit endpoints; declared unhealthy handlers refuse selected execution. Existing names, methods, access/CSRF posture and /api/user/me priority remain. Legacy object helpers project the same table. This source adoption does not qualify installed consumers or the CLI/Bimaaji integration.