Ask for an example that shows how to do authentication via json api

Following the doc you listed, I setup the signin json api and tested it via SwaggerUI. Policies are defined in the User resource as follows:

  policies do
    ...

    bypass action(:sign_in_with_password) do
      authorize_if always()
    end
  end

Unexpected, I got Forbidden back. What is the reason that this json api returned Forbidden?