auth_allow.ini not parsing route prefix about cakephp-tinyauth HOT 11 CLOSED

$this->loadComponent('RequestHandler');
$this->loadComponent('Flash');
$this->loadComponent('FormProtection', [
'validationFailureCallback' => function (BadRequestException $exception) {
$this->Flash->error(__('Something went wrong... <strong>Please refresh the page.</strong>'), ['escape' => false]);
return $this->redirect( $this->request->referer() );
}
]);
$this->loadComponent('TinyAuth.Authentication');
$this->loadComponent('TinyAuth.Authorization');

$this->loadComponent('RequestHandler');
$this->loadComponent('TinyAuth.Authentication');
$this->loadComponent('TinyAuth.Authorization');

  if (strpos($path, '/api') === 0) {
     $service->loadAuthenticator('Authentication.Jwt', [
       'returnPayload' => false
     ]);
     $service->loadAuthenticator('ApiForm');
     $service->loadIdentifier('Authentication.JwtSubject', [
       'resolver' => [
         'className' => 'Authentication.Orm',
         'finder' => 'jwt'
       ]
     ]);
     $service->loadIdentifier('Password', [
       'fields' => $pwd_fields,
       'resolver' => [
         'className' => 'Authentication.Orm',
         'finder' => 'jwt'
       ]
     ]);

     return $service;
   }

   $service->setConfig([
     'unauthenticatedRedirect' => '/backoffice',
     //'queryParam' => 'redirect',
   ]);
   $service->loadAuthenticator('Authentication.Session');
   $service->loadAuthenticator('Authentication.Form', [
     'fields' => $form_fields,
     'loginUrl' => '/backoffice',
   ]);
   $service->loadAuthenticator('Authentication.Cookie', [
     'fields' => $form_fields,
     'loginUrl' => '/backoffice',
     'cookie' => [
       'expires' => new \DateTime('+1 week')
     ]
   ]);
   $service->loadIdentifier('Password', [
     'fields' => $pwd_fields,
   ]);

$resolver = new MapResolver();
    $policy = new RequestPolicy([
      'includeAuthentication' => true,
    ]);
    $resolver->map(ServerRequest::class, $policy);

    return new AuthorizationService($resolver);

protected function _getAllowRule(array $params) {
		$rules = $this->_getAllow($this->getConfig('allowFilePath'));

		$allowDefaults = $this->_getAllowDefaultsForCurrentParams($params);

		foreach ($rules as $rule) {
			if ($params['plugin'] && $params['plugin'] !== $rule['plugin']) {
				continue;
			}
			if (!empty($params['prefix']) && $params['prefix'] !== $rule['prefix']) {
				continue;
			}
                         /*
* this check is missing when the prefix key is not set in the parameter array and the prefix is set in the rule
*/
			if (empty($params['prefix']) && !empty($rule['prefix'])) {
				continue;
			}
/* */
			if ($params['controller'] !== $rule['controller']) {
				continue;
			}

			if ($allowDefaults) {
				$rule['allow'] = array_merge($rule['allow'], $allowDefaults);
			}

			return $rule;
		}

		return [
			'allow' => $allowDefaults,
			'deny' => [],
		];
	}

[
'controller' => 'Countries',
'pass' => [ ],
'action' => 'index',
'plugin' => null,
'_matchedRoute' => '/{controller}',
'_ext' => null,
]

[
'plugin' => null,
'prefix' => 'Api',
'controller' => 'Countries',
'map' => [
(int) 0 => 'index',
],
'deny' => [ ],
'allow' => [
(int) 0 => 'index',
],
]

$params = $this->_registry->getController()->getRequest()->getAttribute('params');
if ( !isset($params['plugin']) ) {
$params['plugin'] = NULL;
}
if ( !isset($params['prefix']) ) {
$params['prefix'] = NULL;
}
$rule = $this->_getAllowRule($params);

protected function _getAllowRule(array $params) {
	$rules = $this->_getAllow($this->getConfig('allowFilePath'));
	$allowDefaults = $this->_getAllowDefaultsForCurrentParams($params);

	foreach ($rules as $rule) {
		if ( isset($params['plugin']) && !is_null($params['plugin']) ) {
			if ($params['plugin'] !== $rule['plugin']) {
				continue;
			}
		} else {
			if (!empty($rule['plugin'])) {
				continue;
			}
		}
		if ( isset($params['prefix']) && !is_null($params['prefix']) ) {
			if ($params['prefix'] !== $rule['prefix']) {
				continue;
			}
		} else {
			if (!empty($rule['prefix'])) {
				continue;
			}
		}
		if ($params['controller'] !== $rule['controller']) {
			continue;
		}

		if ($allowDefaults) {
			$rule['allow'] = array_merge($rule['allow'], $allowDefaults);
		}

		return $rule;
	}

	return [
		'allow' => $allowDefaults,
		'deny' => [],
	];
}