Hi,
I have Magento 2.3.2 installed on localhost with PHP 7.1.3 on a CentOS 7 distribution. I'm developing an integration with Magento using REST API.
I have created an Integration in the Magento store with access to ALL the resources. I also have a user role with access to all the resources, where is included an user.
Well, a few days ago, I succesfully get the orders of the Magento marketplace from a php script using the access token generated when the Integration was created. Like this:
$token = "token";
$ch = curl_init("http://x.x.x.x/index.php/rest/V1/orders?searchCriteria=all");
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Authorization: Bearer " . json_decode($token)));
$result = curl_exec($ch);
$result = json_decode($result, 1);
var_dump($result);But now, a error is returned in the response:
array(3) {
["message"]=>
string(51) "The consumer isn't authorized to access %resources."
["parameters"]=>
array(1) {
["resources"]=>
string(27) "Magento_Sales::actions_view"
}
["trace"]=> ...
I have tested the request on Postman with the same url and the same token and the request woks fine and return the correct response. The same if I make a curl request by command line.
I have changed the endpoint request to get products and it return the existings products in the response:
$token = "token";
$ch = curl_init("http://x.x.x.x/index.php/rest/V1/products?searchCriteria=all");
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Authorization: Bearer " . json_decode($token)));
$result = curl_exec($ch);
$result = json_decode($result, 1);
var_dump($result);There are other endpoints, as customers, that also return the error 'The customer isn't authorized to access %resources', in this case Magento_customers::.
I have checked de database table authorization_rule and Magento_Backend::all have permission to 'allow'.
I have trying differents options that I found in the forum for the same error but nothing works...
Someone have any idea? Thanks in advance!
