loopback POST method not working

Question

I have loopback app and I have model name photo. I working on my local host and try to Post in Photos model and it's working fine. However, when I build it and try to POST on online server I get authorization required error.

My acl look like this:

"acls": [
{
  "accessType": "*",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "DENY"
},
{
  "accessType": "*",
  "principalType": "ROLE",
  "principalId": "admin",
  "permission": "ALLOW"
},
{
  "accessType": "*",
  "principalType": "ROLE",
  "principalId": "$owner",
  "permission": "ALLOW"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "findById"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "__get__comments"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "__count__comments"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "__get__likes"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "__count__likes"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$authenticated",
  "permission": "ALLOW",
  "property": "__create__comments"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": "find"
},
{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$authenticated",
  "permission": "ALLOW",
  "property": "create"
}

I think you should first, test the route without any ACL. If it works, then you can go to the next step and add ACL. Could you include your route and its parameter as well? — Maryam Saeidi

YeeHaw1234 YeeHaw1234 · Accepted Answer · 2017-08-17T14:21:39

First, some cleanup: you can combine many similar ACLSs into a single block:

{
  "accessType": "EXECUTE",
  "principalType": "ROLE",
  "principalId": "$everyone",
  "permission": "ALLOW",
  "property": [
    "find",
    "findById",
    "__get__likes",
    "__get__comments",
    "__count__likes",
    "__count__comments"
    ]
},

... and second: are you logged in when attempting to make your request on your server? Check that the 'authorization' token is being sent and is good. Same database or different database from your localhost?

loopback POST method not working

2 Answers