403 error encountered when attempting to remove a product from the mini basket.

[akropivko]

Hi!
Removing a product item from mini basket by json
/jsonapi/basket?id=default&related=product&relatedid=0&_token=3gWii4rfC7E2iStRMZwXsENWX2RMzAtXBexKdzpY

causes a 403 error:

{"errors": [
{"title": "Not allowed for this resource"}]}

Any ideas how to fix this?

Version - 2023.10.x-dev
Integration - Laravel
System - Windows10

[aimeos]

What is the JSON request you've sent?

[akropivko]

This - /jsonapi/basket?id=default&related=product&relatedid=0&_token=3gWii4rfC7E2iStRMZwXsENWX2RMzAtXBexKdzpY
It is the default AI request to delete a product item from the minibasket. Despite the 403 mistake, the product item had been deleted on my local server, but had NOT been deleted on stage server - the same error. Actually I've recognized the error only when upploaded the project to the stage server.

[akropivko]

... and the same issue when trying to delete a subcategory in the backend -

Screenshot_56.jpg (38.39 KiB) Viewed 27626 times

The request is the default one -
/admin/default/jsonadm/catalog?locale=uk&id=24&_token=TL4Hjd172lwAvo0ucfm1CFNaqkVORxaJk6AaiLys

[aimeos]

This - /jsonapi/basket?id=default&related=product&relatedid=0&_token=3gWii4rfC7E2iStRMZwXsENWX2RMzAtXBexKdzpY
It is the default AI request to delete a product item from the minibasket. Despite the 403 mistake, the product item had been deleted on my local server, but had NOT been deleted on stage server - the same error. Actually I've recognized the error only when upploaded the project to the stage server.

Things to keep in mind:
- It must be an HTTP DELETE request (not GET or POST)
- The value of "relatedid" must be a valid position in the basket (you get valid URLs when you retrieve the basket)

[aimeos]

... and the same issue when trying to delete a subcategory in the backend -
The request is the default one -
/admin/default/jsonadm/catalog?locale=uk&id=24&_token=TL4Hjd172lwAvo0ucfm1CFNaqkVORxaJk6AaiLys

It looks like your web server denies DELETE requests due to its configuration.