Question for some more seasoned flarum devs:
For Threadify to work, I've added a new API which we use to pull posts in the correct order/format from the threadify_threads table:
(new Extend\Routes('api'))
->get('/discussions/{id}/threads', 'discussions.threads', ListDiscussionThreadsController::class)
This works fine when logged in as admin, but getting 403s when logged in as a normal user or not logged in at all, I'm going to guess this isn't to do with my specific api but how new APIs inherit permissions.
What is the correct way to make new APIs totally open for all to use?
Controller code: SyntaxOutlaw/threadifyblob/main/src/Api/Controller/ListDiscussionThreadsController.php
API definition:
SyntaxOutlaw/threadifyblob/main/extend.php
Any help on this would be great, it's a blocking bug