https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38745 --- Comment #9 from Martin Renvoize (ashimema) <martin.renvoize@openfifth.co.uk> --- Created attachment 209594 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=209594&action=edit Bug 38745: Extract authorize_user from authenticate_api_request The permission check at the end of authenticate_api_request is needed by the RPC endpoint, which has to check permissions per method rather than per route. Move it into a reusable authorize_user sub, with no change in behaviour. To test: 1. prove t/db_dependent/api/v1/auth.t t/db_dependent/api/v1/auth_authenticate_api_request.t Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> -- You are receiving this mail because: You are watching all bug changes.