https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38745

--- Comment #9 from Martin Renvoize (ashimema) 
<[email protected]> ---
Created attachment 209594
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=209594&action=edit
Bug 38745: Extract authorize_user from authenticate_api_request

The permission check at the end of authenticate_api_request is needed
by the RPC endpoint, which has to check permissions per method rather
than per route. Move it into a reusable authorize_user sub, with no
change in behaviour.

To test:
1. prove t/db_dependent/api/v1/auth.t
t/db_dependent/api/v1/auth_authenticate_api_request.t

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to