Why does `GET /forgot_password/{tokenValue}` return the entire user? about cooptilleulsforgotpasswordbundle

[vincentchalamon]

Hi @CodeCasterNL,

Thanks for opening this ticket. The documentation has been improved.

Indeed, by default the GetToken serializes the token object. You can use the serialization_groups option to filter which properties are serialized.

If you want to return an empty response, you can override the route as newly explained here: https://github.com/coopTilleuls/CoopTilleulsForgotPasswordBundle/blob/main/Resources/doc/getting_started.md#overriding-the-get-forgot-passwordtoken-response

[vincentchalamon]

@CodeCasterNL Done, I've updated the doc following your recommendation

[CodeCasterNL]

@vincentchalamon thanks! Though the docs now say

it serializes the token object in JSON

Could it be made clear that this includes the entire user entity?