Bug Confusing app_api_validate_request event behaviour

There is a bug in this version
M

mattrogowski

Guest
I'm not sure if this is a bug or I'm misunderstanding how it's intended to work, but I feel it's the former.

Our use case was we need to authenticate the user being used with a super user key via a custom header, as we're using an external user ID stored in the user table to find the XF user. So instead of XF-Api-User we have XF-Api-Custom-User, and we find the user by a different column.

XF\Api\App::validateUserFromApiHeader() fires the...

Read more

Continue reading...