Add more exceptions on routes that are skipped in check.

Created on 16 March 2023, almost 2 years ago
Updated 23 November 2023, about 1 year ago

Problem/Motivation

Some frameworks need to fetch the JSONAPI index (the basic /jsonapi path) without Authorization, so we need to handle these exceptions somehow

Steps to reproduce

Try Next.js + Drupal

Proposed resolution

Add another exception route jsonapi.resource_list into your CheckUserRolePermissionEvent handler's if clause,
OR,
manage a blacklist configuration option inside settings form, and manage this exceptions in Dynamic mode
(Patch included)

Remaining tasks

Test

User interface changes

There's a new textarea element on Settings form.

API changes

None

Data model changes

None

Feature request
Status

Active

Version

1.0

Component

Code

Created by

🇮🇹Italy eglaw Cittadella

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024