Kdjykuj

I've a custom module with custom api, this custom module has a login page with fields "username", "password", the login is using api to login, the url is
http://www.example.com/rest/default/V1/webpos/staff/login, after i input the username andd password, it shows the error.

The error seems was thrown before reaching the code of the custom module, this module works in magento 2.2.2 but not in 2.3.1, anyone knows what is the problem?

<route url="/V1/webpos/staff/login" method="POST">

    <service class="CustomcustomApiStaffStaffManagementInterface" method="login"/>

    <resources>

        <resource ref="Custom_custom::custom" />

        <resource ref="Custom_custom::login" />

    </resources>

</route>

Error

string(3129) "{"message":"The consumer isn't authorized to access %resources.","parameters":{"resources":"Custom_custom::custom, Custom_custom::login"},"trace":"#0 /home/m23/public_html/vendor/magento/module-webapi/Controller/Rest/RequestValidator.php(68): Magento\Webapi\Controller\Rest\RequestValidator->checkPermissions()n#1 /home/m23/public_html/vendor/magento/module-webapi/Controller/Rest/InputParamsResolver.php(80): Magento\Webapi\Controller\Rest\RequestValidator->validate()n#2 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(58): Magento\Webapi\Controller\Rest\InputParamsResolver->resolve()n#3 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(138): Magento\Webapi\Controller\Rest\InputParamsResolver\Interceptor->___callParent('resolve', Array)n#4 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(153): Magento\Webapi\Controller\Rest\InputParamsResolver\Interceptor->Magento\Framework\Interception\{closure}()n#5 /home/m23/public_html/generated/code/Magento/Webapi/Controller/Rest/InputParamsResolver/Interceptor.php(26): Magento\Webapi\Controller\Rest\InputParamsResolver\Interceptor->___callPlugins('resolve', Array, Array)n#6 /home/m23/public_html/vendor/magento/module-webapi/Controller/Rest/SynchronousRequestProcessor.php(85): Magento\Webapi\Controller\Rest\InputParamsResolver\Interceptor->resolve()n#7 /home/m23/public_html/vendor/magento/module-webapi/Controller/Rest.php(188): Magento\Webapi\Controller\Rest\SynchronousRequestProcessor->process(Object(Magento\Framework\Webapi\Rest\Request\Proxy))n#8 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(58): Magento\Webapi\Controller\Rest->dispatch(Object(Magento\Framework\App\Request\Http))n#9 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(138): Magestore\Webpos\Controller\Rest\Interceptor->___callParent('dispatch', Array)n#10 /home/m23/public_html/vendor/magento/framework/Interception/Interceptor.php(153): Magestore\Webpos\Controller\Rest\Interceptor->Magento\Framework\Interception\{closure}(Object(Magento\Framework\App\Request\Http))n#11 /home/m23/public_html/generated/code/Magestore/Webpos/Controller/Rest/Interceptor.php(52): Magestore\Webpos\Controller\Rest\Interceptor->___callPlugins('dispatch', Array, Array)n#12 /home/m23/public_html/vendor/magento/framework/App/Http.php(136): Magestore\Webpos\Controller\Rest\Interceptor->dispatch(Object(Magento\Framework\App\Request\Http))n#13 /home/m23/public_html/generated/code/Magento/Framework/App/Http/Interceptor.php(24): Magento\Framework\App\Http->launch()n#14 /home/m23/public_html/vendor/magento/framework/App/Bootstrap.php(258): Magento\Framework\App\Http\Interceptor->launch()n#15 /home/m23/public_html/pub/index.php(40): Magento\Framework\App\Bootstrap->run(Object(Magento\Framework\App\Http\Interceptor))n#16 {main}"}"