Fix: Input validation before authorization check in ApiPresenter

CHANGELOG.md

@@ -4,6 +4,9 @@ Updates should follow the [Keep a CHANGELOG](http://keepachangelog.com/) princip
 
 ## [Unreleased][unreleased]
 
+### Fixed
+- Input validation before authorization check in ApiPresenter (causes issues with some authorization handlers that need to check input params)
+
 ## 3.4.0
 
 ### Added

src/Presenters/ApiPresenter.php

@@ -85,6 +85,12 @@ public function run(Request $request): IResponse
         }
 
         $paramsProcessor = new ParamsProcessor($handler->params());
+
+        $authResponse = $this->checkAuth($authorization, $paramsProcessor->getValues());
+        if ($authResponse !== null) {
+            return $authResponse;
+        }
+
         if ($paramsProcessor->isError()) {
             $response = $this->errorHandler->handleInputParams($paramsProcessor->getErrors());
             $this->response->setCode($response->getCode());
@@ -93,11 +99,6 @@ public function run(Request $request): IResponse
 
         $params = $paramsProcessor->getValues();
 
-        $authResponse = $this->checkAuth($authorization, $params);
-        if ($authResponse !== null) {
-            return $authResponse;
-        }
-
         try {
             $response = $handler->handle($params);
             $code = $response->getCode();