|
Lines 153-158
sub authenticate_api_request {
Link Here
|
| 153 |
# TODO: remove the latter 'openapi.op_spec' if minimum version is bumped to at least 1.17. |
153 |
# TODO: remove the latter 'openapi.op_spec' if minimum version is bumped to at least 1.17. |
| 154 |
my $spec = $c->openapi->spec || $c->match->endpoint->pattern->defaults->{'openapi.op_spec'}; |
154 |
my $spec = $c->openapi->spec || $c->match->endpoint->pattern->defaults->{'openapi.op_spec'}; |
| 155 |
|
155 |
|
|
|
156 |
my $cookie_auth = 0; |
| 157 |
|
| 156 |
my $authorization = $spec->{'x-koha-authorization'}; |
158 |
my $authorization = $spec->{'x-koha-authorization'}; |
| 157 |
|
159 |
|
| 158 |
my $authorization_header = $c->req->headers->authorization; |
160 |
my $authorization_header = $c->req->headers->authorization; |
|
Lines 220-225
sub authenticate_api_request {
Link Here
|
| 220 |
$user = Koha::Patrons->find( $session->param('number') ) |
222 |
$user = Koha::Patrons->find( $session->param('number') ) |
| 221 |
unless $session->param('sessiontype') |
223 |
unless $session->param('sessiontype') |
| 222 |
and $session->param('sessiontype') eq 'anon'; |
224 |
and $session->param('sessiontype') eq 'anon'; |
|
|
225 |
$cookie_auth = 1; |
| 223 |
} |
226 |
} |
| 224 |
elsif ($status eq "maintenance") { |
227 |
elsif ($status eq "maintenance") { |
| 225 |
Koha::Exceptions::UnderMaintenance->throw( |
228 |
Koha::Exceptions::UnderMaintenance->throw( |
|
Lines 245-250
sub authenticate_api_request {
Link Here
|
| 245 |
|
248 |
|
| 246 |
$c->stash('koha.user' => $user); |
249 |
$c->stash('koha.user' => $user); |
| 247 |
|
250 |
|
|
|
251 |
if ( $user and !$cookie_auth ) { # cookie-auth sets this and more, don't mess with that |
| 252 |
C4::Context->_new_userenv( $user->borrowernumber ); |
| 253 |
C4::Context->set_userenv( $user->borrowernumber ); |
| 254 |
} |
| 255 |
|
| 248 |
if ( !$authorization and |
256 |
if ( !$authorization and |
| 249 |
( $params->{is_public} and |
257 |
( $params->{is_public} and |
| 250 |
( C4::Context->preference('RESTPublicAnonymousRequests') or |
258 |
( C4::Context->preference('RESTPublicAnonymousRequests') or |
| 251 |
- |
|
|