Describe the bug
Using xframe ALLOW-FROM throws error in console: Invalid 'X-Frame-Options' header encountered when loading 'https://api.dev.mysite.com/uploads/my-file.pdf': 'ALLOW-FROM dev.mysite.com' is not a recognized directive. The header will be ignored.

https://strapi.io/documentation/v3.x/concepts/middlewares.html#response-middlewares
instructions for xframe indicate `ALLOW-FR

Steps to reproduce:

1. create collection Categories
2. create collection Articles
3. add relational field to Articles for example M2O
4. add rule Author with all permissions on Articles and only read permission on Categories

When author user add/edit Article visually he can add/edit Category. Finally if saving got an arror:

{
  "message": "You do

• Are you running a release or master: master
• Issue is about a fresh instance (no data in db) or restart: fresh

This seems a known/unfinished issue based on the commented 'Name' field in the code noted below, but I was hoping it could be addressed as it would greatly ease the discovery of the graphql endpoints generated by the db tables as they would become available in GraphiQL in #13

``

Is your feature request related to a problem? Please describe.
Allow social login:

1. Google
2. Facebook
3. Github (this is also for future in CMS discussion, create a ticket to Github purpose)
4. Others (eg, Github, MS, Twitter, Apple,...)

Describe the solution you'd like

• Allow login via /security/login or /security/register
• Allow login methods via API
• Allow l

Class AbstractReflectionPropertyFieldResolver automatically exposes all the properties from a provided class, to easily create its FieldResolver.

Since in PHP 7.4 class properties can be typed, we can extract the types to return in function getSchemaFieldType.