several enhancements (#1808)

* show all fields in timesheet api docs
* fix action dropdown links #1806
* apply same validation rules for passwords and for api-tokens #1753
* added "duplicate team" action #1136

src/Form/API/TimesheetApiEditForm.php

@@ -50,6 +50,11 @@ class TimesheetApiEditForm extends TimesheetEditForm
         $resolver->setDefaults([
             'csrf_protection' => false,
             'allow_duration' => false,
+            // overwritten and changed to default "true",
+            // because the docs are cached without these fields otherwise
+            'include_user' => true,
+            'include_exported' => true,
+            'include_rate' => true,
         ]);
     }
 }

src/Form/UserApiTokenType.php

@@ -41,6 +41,7 @@ class UserApiTokenType extends AbstractType
     public function configureOptions(OptionsResolver $resolver)
     {
         $resolver->setDefaults([
+            'validation_groups' => ['ApiTokenUpdate'],
             'data_class' => User::class,
             'csrf_protection' => true,
             'csrf_field_name' => '_token',