View | Details | Raw Unified | Return to bug 17445
Collapse All | Expand All

(-)a/Koha/REST/V1.pm (-1 / +9 lines)
Lines 91-96 sub authenticate_api_request { Link Here
91
        ) if $cookie and $action_spec->{'x-koha-authorization'};
91
        ) if $cookie and $action_spec->{'x-koha-authorization'};
92
    }
92
    }
93
93
94
    # Check for malformed query parameters
95
    my @errors;
96
    my %valid_parameters = map { $_->{name} => 1 if $_->{in} eq 'query' } @{$action_spec->{parameters}};
97
    my $existing_params = $c->req->query_params->to_hash;
98
    for my $param ( keys %{$existing_params} ) {
99
      push @errors, { path => "/query/".$param, message => 'Malformed query string' } unless exists $valid_parameters{$param};
100
    }
101
    return $c->render_swagger({},\@errors,400) if @errors;
102
94
    return $next->($c) unless $action_spec->{'x-koha-authorization'};
103
    return $next->($c) unless $action_spec->{'x-koha-authorization'};
95
    unless ($user) {
104
    unless ($user) {
96
        return $c->render_swagger({ error => "Authentication required." },{},401);
105
        return $c->render_swagger({ error => "Authentication required." },{},401);
97
- 

Return to bug 17445