mirror of
https://github.com/flarum/core.git
synced 2025-07-18 23:31:17 +02:00
c80d704c0b
Test the request, not a controller (implementation detail). This also focuses on the observable behavior instead of hacking our way into the middleware pipeline in order to observe internal behavior. The authenticated user is now determined by looking at the API response to compare permissions and (non-)existing JSON keys.