Gateway API should validate ACL integrity #2332
Comments
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs, please add comments to this ticket if you would like it to stay open. Thank you for your contributions. |
|
I like to work on this |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment


**Do you want to request a feature or report a bug?
Feature?
What is the current behavior?
Session object ACLs require both the key and the api_id field of the ACL definition to match.
If they mismatch the API does not throw an error.
What is the expected behavior?
The Gateway API should report the discrepancy to stop the token from being generated.
The text was updated successfully, but these errors were encountered: