Skip to content

docs(http-cache): explain caching of authenticated responses - #2361

Closed
soyuka wants to merge 1 commit into
api-platform:4.4from
soyuka:docs/http-cache-authenticated-6730
Closed

soyuka wants to merge 1 commit into
api-platform:4.4from
soyuka:docs/http-cache-authenticated-6730

Conversation

@soyuka

@soyuka soyuka commented Oct 19, 2026

Copy link
Copy Markdown
Member

Documents why cacheHeaders on authenticated Symfony responses come out private/max-age=0 (AbstractSessionListener rewrites Cache-Control once the session is used) and how to cache correctly: non-public client caching, stateless firewall, Vary: Authorization for shared caches, and the NO_AUTO_CACHE_CONTROL_HEADER opt-out with its warning.

Refs api-platform/core#6730

@soyuka soyuka closed this Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant