RateLimitBundle

What's Changed

• Simple phpunit by @goetas in https://github.com/jaytaph/RateLimitBundle/pull/128
• Drop @ratelimit Annotation, Create #[RateLimit] Attribute, Drop php7 support, Drop symfony 3 & 4 support by @axi in https://github.com/jaytaph/RateLimitBundle/pull/132
• Run oauth tests always and update docs by @goetas in https://github.com/jaytaph/RateLimitBundle/pull/133

Upgrade notes

https://github.com/jaytaph/RateLimitBundle/blob/main/UPGRADE-2.0.md

Full Changelog: https://github.com/jaytaph/RateLimitBundle/compare/v1.19.0...2.0.0

This is a major release, please check https://github.com/jaytaph/RateLimitBundle/blob/main/UPGRADE-2.0.md for the upgrade notes.

What's Changed

• Simple phpunit by @goetas in https://github.com/jaytaph/RateLimitBundle/pull/128
• Drop @ratelimit Annotation, Create #[RateLimit] Attribute, Drop php7 support, Drop symfony 3 & 4 support by @axi in https://github.com/jaytaph/RateLimitBundle/pull/132
• Run oauth tests always and update docs by @goetas in https://github.com/jaytaph/RateLimitBundle/pull/133

Full Changelog: https://github.com/jaytaph/RateLimitBundle/compare/v1.19.0...2.0.0-RC1

What's Changed

• Symfony 6 support by @goetas in https://github.com/jaytaph/RateLimitBundle/pull/127
• Call annotation loader only if it exists by @jaytaph in https://github.com/jaytaph/RateLimitBundle/pull/129

Full Changelog: https://github.com/jaytaph/RateLimitBundle/compare/v1.18.0...v1.19.0

What's Changed

• Allow wildcard in path by @asilelik in https://github.com/jaytaph/RateLimitBundle/pull/121
• Remove a deprecation on symfony 5.4 by @axi in https://github.com/jaytaph/RateLimitBundle/pull/123

New Contributors

• @asilelik made their first contribution in https://github.com/jaytaph/RateLimitBundle/pull/121

Full Changelog: https://github.com/jaytaph/RateLimitBundle/compare/1.17.0...v1.18.0

Added PHP8 compatibility

Fixes issues for redis

Added major version 6 of the framework extra bundle to the requirement list

Small fixes which allows you to use ratelimitbundle with composer2.

Also added php-redis cluster functionality.

Fixed some issues with the 1.15.0 release. It should work fine now with Symfony 5.

This release does not include any real new features. It's a bump in the Symfony framework requirements so we can support Symfony 5 and the Symfony 3/4 TLS versions.

There are a few issues where some storage backends do not expire rate limits. Pre-1.7.0 versions relied on the storage backends to expire them so in some cases rate limiting did not function (not a very small issue considering this is a rate limiter).

This version manually calls the resetRate method that will explicitly remove the given rate limit from a cache once it detects that the rate limit has expired. If the storage backend did not remove it, this now will happen.

Updated the bundle for Symfony 3.0 support. It will be backwards compatible with Symfony 2.3, 2.7 and 2.8.

Note: the FOSOAuthServerBundle does not support Symfony 3.0 yet (PR is underway), so you might get issues on conflicting dependencies when using this bundle. This will automatically be resolved in the next coming weeks when that bundle becomes 3.0 compatible as well.

This release fixes a security issue where paths where not properly url decoded before checking. This means that someone could overcome the rate limit by using %2fmy%2furl instead of /my/url as they resulted in storing as different urls. Sam Van der Borght found this issue and supplied a PR for it.

Exceptions can be thrown instead of returning directly a response. This makes it possible for other parts of your system to handle rate limiting exceptions (for instance, the kernel.exception handlers)

Added a doctrine storage, so more storage engines can be easily implemented.