Main Koha release repository https://koha-community.org
Find a file
Tomas Cohen Arazi ee2931a7b0 Bug 22061: Add a /public namespace that can be switched on/off
This patch adds a check in Koha::REST::V1::Auth::under to catch all
routes that begin with 'public' (inside /api/v1). If they match, and the
RESTPublicAPI syspref is off, then an exception is thrown, rendering a
403 error to the consumer.

Otherwise the routes are processed as usual. This is THE on/off switch
for the public REST API. The target use case: people not wanting an OPAC
or public interaction with the API besides privileged users.

In order to test, the rest of the patches are needed because the only
way to test a route is having it in the spec.

To test:
- Apply the patches
- Run:
  $ kshell
 k$ prove t/db_dependent/api/v1/auth.t
=> SUCCESS: tests pass!
- Sign off :-D

Signed-off-by: Josef Moravec <josef.moravec@gmail.com>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
2019-01-28 15:45:54 +00:00
acqui Bug 21853: (follow-up) to solve printpdf error 2018-11-21 11:08:23 +00:00
admin Bug 17353: Add phone number column to checkout search 2019-01-28 13:06:35 +00:00
api/v1 Bug 17006: OpenAPI spec 2019-01-28 15:25:39 +00:00
authorities Bug 19994: Used Modern::Perl in Authorities perl scripts 2019-01-28 14:58:23 +00:00
basket Bug 21993: Display a user-friendly message when the CSRF token is wrong 2019-01-25 20:38:32 +00:00
C4 Bug 21290: Updating documentation for ModItem 2019-01-28 14:35:27 +00:00
catalogue Bug 21170: Remove "isn't numeric in numeric eq (==)" warnings in MARCdetail 2019-01-18 20:35:49 +00:00
cataloguing Bug 21986: Do not escape quotation marks when cataloguing 2018-12-14 13:33:28 +00:00
circ Bug 21877: Use AuthorisedValues.GetDescriptionByKohaField for notforloan in checkout 2019-01-28 11:23:14 +00:00
clubs
course_reserves Bug 21501: Remove dead code from course reserves module 2018-11-02 10:37:45 +00:00
debian Bug 18909: Enable the maximum zebra records size to be specified per instance 2019-01-25 16:14:48 +00:00
docs Bug 7143: Fix typo in adding new dev 2019-01-18 20:12:08 +00:00
errors
etc Bug 17047: SQL reports management with Mana-KB 2019-01-23 14:39:26 +00:00
ill Bug 20640: (follow-up) Make error message translatable 2019-01-28 13:06:31 +00:00
installer Bug 22061: Add RESTPublicAPI syspref 2019-01-28 15:45:54 +00:00
Koha Bug 22061: Add a /public namespace that can be switched on/off 2019-01-28 15:45:54 +00:00
koha-tmpl Bug 22061: Add RESTPublicAPI syspref 2019-01-28 15:45:54 +00:00
labels Bug 21719: Fix typos 2018-11-08 02:18:46 +00:00
members Bug 22134: (follow-up) Simplify check for expired patron 2019-01-28 14:51:41 +00:00
misc Bug 22049: Make MarkIssueReturned rely on returndate only 2019-01-25 20:46:47 +00:00
offline_circ Bug 22049: (QA follow-up) update MarkIssueReturned call in process_koc.pl 2019-01-25 20:46:48 +00:00
opac Bug 22048: Use set_password opac/opac-password-recovery.pl 2019-01-25 20:15:31 +00:00
OpenILS
patron_lists Bug 19524: Use existing logged_in_user variable 2018-07-18 16:49:30 +00:00
patroncards Bug 21719: Fix typos 2018-11-08 02:18:46 +00:00
plugins
reports Bug 17047: add a dedicated page for Mana setup 2019-01-23 14:39:26 +00:00
reserve Bug 21608: Disable dropdown for found holds - add button to revert 2018-12-11 19:13:30 +00:00
reviews
rotating_collections Bug 21500: Remove warnings in rotating collections 2018-10-09 15:02:45 +00:00
serials Bug 17047: add a dedicated page for Mana setup 2019-01-23 14:39:26 +00:00
services
skel
suggestion Bug 21048: (QA follow-up) Fix authorized value statuses in filter 2018-08-08 20:58:23 +00:00
svc Bug 17047: add a dedicated page for Mana setup 2019-01-23 14:39:26 +00:00
t Bug 22061: Add a /public namespace that can be switched on/off 2019-01-28 15:45:54 +00:00
tags Bug 22036: Indented code where '^I' was written rather than an indent. 2019-01-17 02:23:28 +00:00
test
tmp/modified_authorities
tools Bug 21993: Display a user-friendly message when the CSRF token is wrong 2019-01-25 20:38:32 +00:00
virtualshelves Bug 21874: (QA follow-up) Fix intranet sendshelf 2018-11-26 12:38:56 +00:00
xt Bug 21576: Keep compatibility with QA script 2018-10-26 17:09:52 +00:00
.editorconfig
.gitignore Bug 20427: Convert OPAC LESS to SCSS 2018-08-09 15:17:07 +00:00
.htaccess
.mailmap
.scss-lint.yml Bug 21237: Clean up staff client SCSS 2018-08-24 16:23:25 +00:00
about.pl Bug 20996: Remove prefix use of borrower category 2018-11-02 10:33:02 +00:00
changelanguage.pl Bug 21299: (QA follow-up) Rename module and subroutine 2018-11-07 21:52:17 +00:00
fix-perl-path.PL
gulpfile.js Bug 20427: Convert OPAC LESS to SCSS 2018-08-09 15:17:07 +00:00
help.pl Bug 19817: Use the language from the interface if valid 2018-09-06 17:32:28 +00:00
INSTALL
install-CPAN.pl
Koha.pm Bug 21241: DBRev 18.12.00.009 2019-01-28 13:06:18 +00:00
koha_perl_deps.pl
kohaversion.pl
LICENSE
mainpage.pl Bug 17698: Do not send pending_checkout_notes from all circ scripts 2018-07-23 15:23:44 +00:00
Makefile.PL Bug 21719: Fix typos 2018-11-08 02:18:46 +00:00
MANIFEST.SKIP
package.json Bug 19474: Convert staff client CSS to SCSS 2018-08-09 15:12:20 +00:00
README
README.md Bug 15465: Fix typo in bugs.k-c.org 2017-05-26 11:45:31 -03:00
README.robots
rewrite-config.PL Bug 14302: Remove GRS1 specific code 2018-08-31 11:24:20 +00:00
yarn.lock Bug 19474: Convert staff client CSS to SCSS 2018-08-09 15:12:20 +00:00

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: This is a synced mirror of the official Koha repo.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo