REST API bugs

  • Blocker
  • Critical
  • Major
  • Normal
  • Minor
  • Trivial
  • Enhancement
  • New Feature

New 102

internal server error on all searches with REST API
Post request to /checkouts results in 500 error
[OMNIBUS] Timezone ignored when passing rfc3339 formatted date
REST API auth/password/validation fails on patron with a null cardnumber
REST API doesn't show phone number for libraries
38398
MR
Do not call barcodeencode on remove_from_bundle
Add Patron API call should respect mandatory borrower fields
40130
TCA
API should respect BlockExpiredPatronOpacActions for ILL requests
40131
TCA
API should respect BlockExpiredPatronOpacActions for renewals
Vendor contact object under specified
All list endpoints should have the x-koha-request-id parameter definition
Automatically assign itemId for items created with https://api.koha-community.org/api/v1/biblios/{biblio_id}/items
REST API account endpoint permissions should not require edit_borrowers permission
38389
MR
Add 'subscriptions' embed to vendors endpoint
Tidy merge biblio feature
API endpoint to set password for patron requires full borrowers permission, but should only require 'edit_borrowers'
API patrons missing some fields
api/v1/swagger/swagger.yaml examples are not up to date with wiki
29322
TCA
Date validation can be sketchy on the API
REST API: Why does a wrong column name still cause a general 500 while validating exhaustively?
400/404 actually returns 500
Log changes to orders made via orders API
Unprivileged route to bib records needs check on OpacSuppression
27853
TCA
POST /patrons doesn't enforce mandatory extended attributes
PluginRoutes.t - deprecation warnings on D11
24824
TCA
updated_on should be a read-only field via the API
missing Content-Type / HTTP 415 check for POST requests to /api/v1/patrons
Warning in tr (at Mojo/Headers.pm) because of undef X-Base-Total-Count HTTP header value
Add REST API equivalents for svc/report and opac/svc/report
42404
TCA
Add a batch cover images upload endpoint
42405
TCA
Add single cover image upload path
42351
KMH
Add header for tracing API requests
Allow dismissing patron messages via API
Koha::Patron->strings_map triggers per-row DB queries for library and category
current_item_level_holds+count is not sortable on the API
bundle_items_not_lost+count is not sortable on the API
bundle_items_lost+count is not sortable on the API
biblio.uncancelled_orders+count is not sortable on the API
Add Confirmation Flow to POST /holds
listAdditionalFields needs parameters to link to specific object
All patron-centric APIs should honor RESTMaxPatronsPageSize
40790
TCA
Create Rest API for reading and writing system preferences
Add OAuth2 scopes to REST API
25796
TCA
Allow REST API to use external OAuth2 authorization server
When registering via the API extended attributes are checked for mandatory but not opac_mandatory
24599
AM
Add endpoints for bulk processing of holds
Date filters use the syntax stored in database.
30299
TCA
Create a Registration API to allow for use of email verification when outside systems are registering patrons
Replace acqui/check_uniqueness.pl with REST API
[OMNIBUS] Missing maxLength to REST API specs
Add option to subject purchase suggestion API call to OPAC requirements
Patron API to allow messaging preferences set through patron attribute
Add GET route for star ratings
`cancellation-request-flow` override lacks documentation
Confirmation flow vs. x-koha-override docs
REST API endpoint expansion for table saved_sql
Return 405 (Method not allowed) when a route is called with the wrong method
Add override options to checkouts endpoint(s)
Lack of REST API Support for Linking Items to Orders
Add rate-limiting to the REST API
RPC style action endpoint for choosing matches
Add API for lists management
38229
MR
Clean up PATCH on /holds endpoints
36696
MR
Add an endpoint to fetch a constructed notice
Timezone ignored when passing rfc3339 formatted date (POST,PUT,PATCH)
Timezone ignored when passing rfc3339 formatted date (search embed)
Opening and closing hours should be either delivered in libraries responses or have a dedicated endpoint
37590
MR
Allow requesting circulation rule sets using wildcards
Rest API error
The /checkouts, /biblios/{biblios_id}/checkouts and /patrons/{patron_id}/checkouts endpoints should all use the same code
Add REST API route for patron information update requests
Rest API access on public side to IP field needed
30635
MR
Add API route to create/update borrower_relationships, guarantors/guarantees
Some PUT endpoints wipe data if embeds are missing from the payload
Delete API key or add a deleted flag?
Add REST API for requesting address changes
Add override options to checkout renewal endpoint
34208
MR
Expose a way to search for patrons by their outstanding balances
[OMNIBUS] Replace svc scripts
Add "public_api_routes" Koha plugin method
Holds API errors not easily machine-readable
33711
MR
Refine the token passing mechanisms introduced in bug 23336
Adding faceting to API result sets
POST /biblios incorrect response
REST API: Add PATCH route for acquisition invoices
REST API: Add GET route for acquisition invoices
Add GET /public/authorities
32948
TCA
Add REST API endpoint to list a patron's return claims
REST API route to list background jobs should not decode data
Add debit_type endpoints
[Omnibus] Improve REST API for ILL
Add REST endpoint for searching extended patron attributes
REST API should include a patron import function
Possible inefficiency in REST API for biblios endpoint
Add PATCH route for items
Exceptions thrown during a call to ->render are not caught and passed to ->unhandled_exception
Add credit_types endpoint
REST API: CRUD endpoints for holdings records
18103
LT
REST API: Add endpoint for patron status / blocks
OAuth2 authorization code grant for REST API
Endpoint for budgets
19757
TCA
Add routes to handle vendor contacts

Assigned 8

39426
TCA
Inconsistency in handling debits and credits via the accounts endpoint
40220
LG
API Incorrectly Requires Mandatory Extended Attributes Not Visible in OPAC
28318
MR
accountlines.credit_number missing on the API
35613
TCA
Migrate spec to OpenAPI v3
23285
JR
Add patrons PATCH route
24237
TCA
The 406 response on the biblios end point should be more discoverable
18407
JM
REST API: Include renewability information on checkouts
31624
PD
REST API: Add endpoint for generated covers

In discussion 10

OVERRIDE_SYSPREF does not work for REST API
42373
KMH
Add ability to disallow unbounded patron API searches
39862
TCA
Make cookie auth take more precedence than other methods
39199
SYW
REST API: Add POST route for adding to notices/message queue
Support anti-the at REST API level
40023
TCA
Allow embedding `patron` when validating credentials
38226
TCA
Add RPC endpoint for batch filling empty callnumbers
36075
AA
Add API route to list recalls
Unhandled exception not displaying stack trace
System preference to control access to own objects without permission

Failed QA 9

40847
TCA
OAuth endpoint missing some validations
29959
JM
Populate prices when creating an order with the API
41869
JR
Change /holds POST and PATCH permission to place_holds
25870
HW
Add a q_ccl query parameter to /biblios (ie add search API endpoint)
Add REST API endpoint for Authorised Values
Add routes for updating checkouts
18795
JR
REST API: DELETE (anonymize) checkout history
19133
LT
Password recovery routes
REST API: Save information on owner access

Patch doesn't apply 5

41618
SYW
Add item data in MARC records returned by the API
38050
JO
Add REST endpoints for working with "lists"/"virtual shelves"
REST API: Add API routes for getting item availability and holdability
14843
LT
Notifications and messages via REST API
Refactor REST API allow-owner authorization logic

Needs signoff 11

42595
TCA
Holds controller renders bare strings instead of error objects
42732
TCA
Migrate catalogue/detail.tt addToBundle $.post to api-client.js
42731
TCA
Migrate modal-claims.inc $.post to api-client.js
42730
TCA
Migrate place_booking.js $.post to api-client.js
39637
JM
Patron search generates URIs that are too long and can cause "HTTP 414 URI Too Long" errors
39851
JD
Languages for REST API is returned in random order
41530
MR
item_type vs item_type_id inconsistencies in the API
42587
TCA
overdues+count is not sortable on the API
42592
TCA
Flag +count embeds that cannot be sorted
35722
JR
Item transfer operations should be available from the API
41463
AA
Add Koha REST API endpoints for OAI sets

Signed off 9

36988
KMH
PUT for patrons requires full borrowers permission, but should only require 'edit_borrowers'
40736
DC
OAuth/OIDC authentication logs error message when CGISESSID is missing
42679
TCA
Add GET /patrons/{patron_id}/overdues_count endpoint
24401
TCA
Add POST /checkins endpoint with availability check and confirmation flow
42207
PD
Allow library embed on GET /patrons/{patron_id}
42311
TCA
REST API CRUD endpoints for library calendar
38291
MB
Add GET /library_groups
29900
CL
API calls should update datelastseen for API patron
23998
SYW
Messages REST API

Passed QA 3

42739
TCA
OPAC ratings.js: Add CSRF-TOKEN header to fetch call
41950
TCA
Make +count embeds sortable by using SQL-level COUNT subqueries
35797
SYW
Add GET route for patron images

Pushed to main 1

39336
MR
Public Biblio endpoint should honour OpacSuppression syspref

Needs documenting 18

39932
TCA
Koha::Item->_status should return an array
38905
JR
Updating an item of a bibliographic record should use edit_items instead edit_catalogue permission
39397
TCA
Searching a biblio by timestamp returns a different timestamp
38927
TCA
Unecessary call to FindDuplicate if x-confirm-not-duplicate is passed to POST /biblios
37286
JM
Fix REST API authentication when using Mojo apps
38679
TCA
GET /deleted/biblios missing some mappings
36536
CL
Make REST API's validateUserAndPassword update borrowers.lastseen
35246
TCA
Bad data erorrs should provide better logs for api/v1/biblios
39260
EP
Typo in acquisitions baskets API documentation
41994
JD
REST API route to list system preferences
41107
TCA
Create an API endpoint to get Koha version
40542
TCA
Add `cancellation_reason` to holds strings embed
38253
JR
REST API: Toggle holds lowest priority via REST API
39816
TCA
Allow embedding `days_late` in baskets
40550
PA
Add /holds/cancellation_bulk endpoint
38931
TCA
Add endpoints for individual credits and debits
40511
MB
Add maxLength to the eHoldings title definition
40512
MB
Add maxLength to the erm agreements definition