Laravel : 4.2.14 - NotExposedController breaks existing app

[MPerezMM]

API Platform version(s) affected: 4.2.14 Laravel

Description

Upgrading an existing API using Laravel API Platform to v. 4.2.14 causes error 500 :

TypeErrorvendor/laravel/framework/src/Illuminate/Routing/RouteSignatureParameters.php:27
ReflectionFunction::__construct(): Argument #1 ($function) must be of type Closure|string, ApiPlatform\Laravel\Controller\NotExposedController given

How to reproduce

The impacted API is using Controllers for authentication and to expose an older endpoint using Laravel standard API: so api/v1 uses controllers and routes, and api/v2 uses API Platform, it was working fine until v. 4.2.14

Possible Solution

Downgrading to 4.2.13 is the only solution I found yet. If you have any idea to fix this it would be great!

Additional Context

[AhmedEssssam]

Hi 👋

This is happening because API Platform 4.2.14 introduced a breaking change
in how Laravel routes expect the controller argument.

The router now requires a Closure|string, but NotExposedController
is being passed as an object instance.

Possible clean fixes:

1. Update the route definition to pass the controller class instead of instance:
   ->controller(NotExposedController::class)

OR

2. Wrap it in a Closure to stay compatible with the new signature.

I can help implement a proper fix without downgrading to 4.2.13.

If you want, share:

• the current route definition
• how NotExposedController is registered

I’ll check it for free and suggest the safest patch.