尝试使用Loopback API注销时获得401

Question

I've got a Loopback js api and a Vue js app that I'm trying to get to talk to each other, but I'm getting a weird error. I'm trying to POST logout from my Vue app, but it keeps giving me a 401 even though it works fine when I do it from the Loopback api explorer.

My request is to http://localhost:3000/api/employees/logout with payload access_token : "XXX" where employees is my model extending User.

The code making the client-side request is

  axios.post(`${store.api.url}/employees/logout`, {
    access_token: store.state.authentication.auth.id
  })
  .then(() => {
    store.commit('resetAuth');
    this.$router.push({ name: 'login' });
  })
  .catch((error) => {
    console.log(error);
  });

And yes, I am authenticated and the token does exist on the other end. Any help would be appreciated.

Answer 1

So apparently it was permissions -_-

If you don't have permission to access an object, even if you are authenticated, it returns a 401, not a 403 like I was expecting.

Answer 2

did you add authentication.js script to server/boot and re check ACL for employee model ? Those are the loose ends in certain problems, I guess.