环回POST方法不起作用
我有环回应用程序,我有型号名称照片。我在我的本地主机上工作,尝试发布在照片模式,它工作正常。但是,当我构建它并尝试在在线服务器上POST时,我得到授权所需的错误。环回POST方法不起作用
我的ACL是这样的:
"acls": [
{
"accessType": "*",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "DENY"
},
{
"accessType": "*",
"principalType": "ROLE",
"principalId": "admin",
"permission": "ALLOW"
},
{
"accessType": "*",
"principalType": "ROLE",
"principalId": "$owner",
"permission": "ALLOW"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "findById"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "__get__comments"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "__count__comments"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "__get__likes"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "__count__likes"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$authenticated",
"permission": "ALLOW",
"property": "__create__comments"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": "find"
},
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$authenticated",
"permission": "ALLOW",
"property": "create"
}
首先,一些清理工作:你可以在许多类似ACLSs合并成一个单一的块:
{
"accessType": "EXECUTE",
"principalType": "ROLE",
"principalId": "$everyone",
"permission": "ALLOW",
"property": [
"find",
"findById",
"__get__likes",
"__get__comments",
"__count__likes",
"__count__comments"
]
},
...和第二:是您登录当试图在您的服务器上提出请求时?检查'授权'令牌是否正在发送,并且是否正常。相同的数据库或从本地主机的不同数据库?
YeeHaw1234是的,我登录,然后尝试发布和授权发送。这两个数据库都是MySQL –
不幸的是我没有一个快速的答案。我唯一的建议是更多的调试。如果您有权访问服务器的控制台,请使用以下命令运行环回:DEBUG = loopback:security:access-context。这将显示安全调试信息,您可以查看确切的用户登录方式以及抛出AUTHORIZATION_REQUIRED错误的方法 – YeeHaw1234
您可以检查哪些被启用下列调试选项应用于路由ACL:
DEBUG=loopback:security:acl
我用这个日志解决配置ACL我的问题。
请检查此链接了解更多信息:
https://loopback.io/doc/en/lb2/Setting-debug-strings.html#using-debug-strings
我想你应该首先测试路由,而不需要任何ACL。如果有效,那么你可以进入下一步并添加ACL。你能包括你的路线和参数吗? –