Following the doc you listed, I setup the signin json api and tested it via SwaggerUI. Policies are defined in the User resource as follows:
policies do
...
bypass action(:sign_in_with_password) do
authorize_if always()
end
end
Unexpected, I got Forbidden back. What is the reason that this json api returned Forbidden?






















