v1.0.42 - use routes.php instead of routes.xml

appinfo/info.xml

@@ -4,7 +4,7 @@
 	<name>Minimal Profile</name>
 	<summary>Hides profile fields to create a minimal user profile</summary>
 	<description>Allows administrators to hide profile fields like pronouns, social links, etc.</description>
-	<version>1.0.41</version>
+	<version>1.0.42</version>
 	<licence>AGPL</licence>
 	<author>Your Name</author>
 	<namespace>MinimalProfile</namespace>

appinfo/routes.php

@@ -0,0 +1,6 @@
+<?php
+return [
+    'routes' => [
+        ['name' => 'api#getHiddenFields', 'url' => '/api/v1/hidden-fields', 'verb' => 'GET'],
+    ],
+];

appinfo/routes.xml

@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<routes>
-	<route url="/apps/minimalprofile/api/v1/hidden-fields" method="GET" controller="OCA\MinimalProfile\Controller\ApiController" action="getHiddenFields"/>
-</routes>

lib/Controller/ApiController.php

@@ -5,6 +5,8 @@ declare(strict_types=1);
 namespace OCA\MinimalProfile\Controller;
 
 use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
+use OCP\AppFramework\Http\Attribute\PublicPage;
 use OCP\AppFramework\Http\JSONResponse;
 use OCP\IConfig;
 use OCP\IRequest;
@@ -19,6 +21,8 @@ class ApiController extends Controller {
 		parent::__construct($appName, $request);
 	}
 
+	#[NoCSRFRequired]
+	#[PublicPage]
 	public function getHiddenFields(): JSONResponse {
 		$value = $this->config->getAppValue('minimalprofile', 'hidden_fields', '');
 		$hiddenFields = $value !== '' ? json_decode($value, true) ?? [] : [];