Error Authorization Required

[bellgetlinks]

Hi I figure out how to upload file to s3 to sub folder and I found this :)

By the way I trying upload file and I add access_token={token} but always get 401 error

Example : POST "/api/consumers/{id}/images/{folder}/files/upload?access_token={token}"

I dont know why :(

[regevbr]

Can you please try sending the acces token in the authorization header and let me know if that works?

…

On Fri, Jun 1, 2018, 22:01 bellgetlinks ***@***.***> wrote: Hi I figure out how to upload file to s3 to sub folder and I found this :) By the way I trying upload file and I add access_token={token} but always get 401 error Example : POST "/api/consumers/{id}/images/{folder}/files/upload?access_token={token}" I dont know why :( — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFggn9KpZGe_JflXFwo7LFHE1gBEiTpcks5t4Y99gaJpZM4UXK2J> .

[bellgetlinks]

it's not working :(

[regevbr]

I think I know what the issue is.
When dealing with ACLs in nested queries, the ACL is actually being assigned and tested only of the first level model of the nesting. In your case it is the consumers model.
To allow the file upload of a consumer you need to add the following (or similar) to the consumers model json file:

 "acls": [
    {
      "accessType": "EXECUTE",
      "principalType": "ROLE",
      "principalId": "$owner",
      "permission": "ALLOW",
      "property": [
        "__upload__images"
      ]
    }
]

Please notice the property "__upload__images" in which images is the name of the realation you gave between the consumer and the images model in the consumers json file.
If that doesn't work for you, you need to figure out the property name for that action that loopack assigned to it. I think one way of doing it is by looking at the generated angular code (lb-ng) or you can debug the code in the "Nested Queries" seciton in my readme file and see the names it produces.
Please let me know if that helps or not so I can continue to help out

[regevbr]

You can also start by enabling all acl actions on the consumers model and see if that works

[bellgetlinks]

Thanks for your advice, It looks like the error is gone but I found another problem

Seem like s3 generate new folder by using userId :/

And nothing create in images model after upload file

[regevbr]

Good to hear!
From the docs of the component i based this library on:
Upload one or more files into the specified container. The request body must use multipart/form-data which is the file input type for HTML uses.
Are you sure you are passing the proper data in the post body?
Please aee the following code example in https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file

[bellgetlinks]

This is what I test upload file just only one file and my s3 bucket create new folder following userId

ps. I try to remove all acl but noting works always error 401

[regevbr]

I will try to set uo a sample project tommrow for you to use

[regevbr]

You need to give in the description the file name e.g. screenshot.png that works for me using postman

[regevbr]

As to the ACL, you need to have in the consumers.json file the following relation

  "relations": {
    "images": {
      "type": "hasOne",
      "model": "Image",
      "foreignKey": "userId"
    }
  }

Combined with the ACL

 "acls": [
    {
      "accessType": "EXECUTE",
      "principalType": "ROLE",
      "principalId": "$owner",
      "permission": "ALLOW",
      "property": [
        "__upload__images"
      ]
    }
]

it should work. You must provide and access token of the consumer for it to work in my case as we gave the permission to the owner of the current consumer instance.

This works for both providing the access token in the header or as a query param...

If this still doesnt work for you please post all relevant configuration files so I can see what went wrong

[bellgetlinks]

Thanks you for your help but It's not working yet. I will start a new project to test first and will try what is wrong :)