[Koha-bugs] [Bug 25045] REST API public route accessible if OpacPublic is off

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25045

--- Comment #2 from Tomás Cohen Arazi <tomascohen at gmail.com> ---
Hmm, I got the OpacPublic behaviour wrong. This needs to be discussed in a dev
meeting I belive.

OpacPublic doesn't disable the OPAC as I thought (based on my memories from the
'have an on/off switch for the API' discussion), but only allow interacting
with it after there's a valid session.

We might need to develop some way to identify public routes that don't require
a session. We don't have such routes yet, but worth considering as there are
routes like the one for fetching records on the QA queue. We should add that to
the agenda.

-- 
You are receiving this mail because:
You are watching all bug changes.