Shield Module Stops Working After Adding and Removing Excluded Path for JSONAPI

Created on 3 December 2024, 20 days ago

Problem/Motivation

I am using the Shield module along with the REST API Authentication module to manage access to JSON:API endpoints. The issue arises when adding and removing paths from the Shield configuration:

  • Adding /jsonapi/* to the "Exclude paths" section allows JSON:API requests as expected.
  • However, after removing /jsonapi/* from the configuration, Shield stops blocking access to the entire site.

This behavior prevents Shield from functioning as intended, even after revert the chnages. It works only after I uninstall and reinstall again and re-configure

Steps to reproduce

  1. Install and enable the Shield module.
  2. Add /jsonapi/* to the "Exclude paths" configuration.
  3. Test access to a JSON:API endpoint using Postman. Confirm it works without Shield blocking it.
  4. Remove /jsonapi/* from the Shield "Exclude paths" configuration.
  5. Test access to various URLs, and notice that Shield no longer protects any URLs.
🐛 Bug report
Status

Active

Version

1.7

Component

Code

Created by

🇮🇳India mdeahmad Mumbai

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024