shopware / app-bundle

6.1.0 2026-09-21 06:23 UTC

Requires

• php: >=8.1
• nyholm/psr7: ^1.8
• shopware/app-php-sdk: >=5.0.0
• symfony/http-client: ^6.4 || ^7.0 || ^8.0
• symfony/psr-http-message-bridge: ^6.4 || ^7.0 || ^8.0
• symfony/routing: ^6.4 || ^7.0 || ^8.0

Requires (Dev)

• async-aws/async-aws-bundle: ~1.12
• async-aws/dynamo-db: ~3.2.1
• doctrine/doctrine-bundle: ^2.8
• doctrine/orm: ^3.0
• friendsofphp/php-cs-fixer: ^3.16
• infection/infection: ^0.26.21
• phpstan/phpstan: ^1.10.14
• phpunit/phpunit: ^10.1
• symfony/doctrine-bridge: ^6.4 || ^7.0 || ^8.0
• symfony/phpunit-bridge: ^6.2.10 || ^6.3 || ^6.4 || ^7.0 || ^8.0
• symfony/polyfill-uuid: ~1.31.0

Suggests

• async-aws/async-aws-bundle: To use DynamoDB as the persistence layer
• async-aws/dynamo-db: To use DynamoDB as the persistence layer
• doctrine/doctrine-bundle: To use Doctrine as the persistence layer
• doctrine/orm: To use Doctrine as the persistence layer
• symfony/doctrine-bridge: To use Doctrine as the persistence layer

MIT

• shopware AG

Published on Packagist.org on 2026-09-21 06:24 UTC

README

App Bundle integrates the PHP App SDK for Symfony.

Refer to the quick start documentation for more information.

Requests to shops

All requests to shops, from the SDK's ClientFactory and the reachability check, go through the shopware_app.shop_http_client service. It uses the options of its base client, e.g. framework.http_client.default_options.

shopware_app:
    shop_http_client:
        base_client: http_client  # Symfony HTTP client to build on
        url_guard:
            enabled: false
            max_redirects: 5
            max_response_bytes: 8388608

Shop URLs come from whoever installs your app, so they can point into your own network. The URL guard refuses anything but https:// to a public IP address, also on redirects, and caps redirects and response size. Enable it in production; local shops usually run on http://localhost:

when@prod:
    shopware_app:
        shop_http_client:
            url_guard: true

Your own decorators of shopware_app.shop_http_client run before the guard with a priority below 16, and after it with a priority above 16.