If the access token is not set, then look in the post data.

1 files changed, 6 insertions, 0 deletions

diff --git a/modules/rest/controllers/rest.php b/modules/rest/controllers/rest.php
index 3db5e9b1..13594763 100644
--- a/modules/rest/controllers/rest.php
+++ b/modules/rest/controllers/rest.php
@@ -41,6 +41,7 @@ class Rest_Controller extends Controller {
   public function __call($function, $args) {
     $input = Input::instance();
     $request = new stdClass();
+
     switch ($method = strtolower($input->server("REQUEST_METHOD"))) {
     case "get":
       $request->params = (object) $input->get();
@@ -56,6 +57,11 @@ class Rest_Controller extends Controller {
 
     $request->method = strtolower($input->server("HTTP_X_GALLERY_REQUEST_METHOD", $method));
     $request->access_token = $input->server("HTTP_X_GALLERY_REQUEST_KEY");
+
+    if (empty($request->access_token) && !empty($request->params->access_token)) {
+      $request->access_token = $request->params->access_token;
+    }
+
     $request->url = url::abs_current(true);
 
     rest::set_active_user($request->access_token);