Change priority of me e ndpoint to prevent all users getting /me iri

Author: silverbackdan

features/user/security.feature

@@ -53,11 +53,11 @@ Feature: Prevent disabled users from logging in
   @loginSuperAdmin
   Scenario: A logged in user can fetch a list of all users
     Given there is a user with the username "another_user" password "password" and role "ROLE_USER"
-    When I send a "GET" request to "/users"
+    When I send a "GET" request to "/users?perPage=5"
     Then the response status code should be 200
     And the JSON node "member" should have 2 elements
-    And the JSON node "member[0].username" should be equal to "another_user"
-    And the JSON node "member[1].username" should be equal to "new_user"
+    And the JSON node "member[0].@id" should match "/^\/users\/([a-zA-Z0-9\-]+)$/"
+    And the JSON node "member[1].@id" should match "/^\/users\/([a-zA-Z0-9\-]+)$/"
 
   Scenario: A successful login
     Given there is a user with the username "admin" password "password" and role "ROLE_ADMIN"

src/ApiPlatform/Metadata/Resource/UserResourceMetadataCollectionFactory.php

@@ -73,6 +73,7 @@ private function createMeOperation(Get $operation): Operation
     {
         return new Get(
             uriTemplate: '/me{._format}',
+            uriVariables: [],
             routePrefix: $operation->getRoutePrefix(),
             cacheHeaders: [
                 'public' => false,
@@ -82,6 +83,7 @@ private function createMeOperation(Get $operation): Operation
             shortName: '__api_me',
             class: $operation->getClass(),
             security: 'is_granted("IS_AUTHENTICATED_FULLY")',
+            priority: 1000,
             name: '_api_me',
             provider: UserStateProvider::class
         );