I’ve just realised that the proposed draft preview fix earlier introduced a bug for logged out users, where all pages redirected to the error page.
Here isReadable() is replaced by isVerified(). In order to make this work, the query token needs to be attached to all .json requests as well. Otherwise the data could either not be fetched or would be publicly exposed.
@johannschopplich
I’ve just realised that the proposed draft preview fix earlier introduced a bug for logged out users, where all pages redirected to the error page.
Here
isReadable()
is replaced byisVerified()
. In order to make this work, the query token needs to be attached to all.json
requests as well. Otherwise the data could either not be fetched or would be publicly exposed.https://getkirby.com/docs/reference/objects/cms/page/is-verified
Sorry for introducing the bug prior. This should fix it.