filsh/yii2-oauth2-server

Access Controle

Opened this issue · 0 comments

Aghanim commented

Hello, I have an issue when I trying to call action via POST method and setup AccessControle behavior as 'roles' => ['@'], I get an error:
{"name":"Forbidden","message":"Login Required","code":0,"status":403,"type":"yii\web\ForbiddenHttpException"}

If I call this action via GET - its ok. Csrf - off