RSS Feed/News Confusing app_api_validate_request event behaviour

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
24,684
Points
823

Reputation:

I'm not sure if this is a bug or I'm misunderstanding how it's intended to work, but I feel it's the former.

Our use case was we need to authenticate the user being used with a super user key via a custom header, as we're using an external user ID stored in the user table to find the XF user. So instead of XF-Api-User we have XF-Api-Custom-User, and we find the user by a different column.

XF\Api\App::validateUserFromApiHeader() fires the...

Read more

Continue reading...
 
Status
Not open for further replies.
Top