>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3546813. --> Reported by: [dries](https://www.drupal.org/user/1) Related to !32 >>> <p>When testing the MCP module, I ran into this problem with Drupal Core: <span class="drupalorg-gitlab-issue-link project-issue-status-info project-issue-status-1"><a href="https://www.drupal.org/project/drupal/issues/3546811" title="Status: Active">#3546811: Authentication provider selection ignores route restrictions</a></span>.</p> <p>The problem is that when the <code>basic_auth</code> module (which ships with Drupal Core) is enabled, Drupal uses it to authenticate requests to <code>/mcp/post</code>, even though <code>basic_auth</code> is not listed among the route's supported authentication providers.</p> <p>I believe this is a bug in Core that needs to be addressed. As a viable workaround, the priority of <code>mcp_auth</code> can be adjusted so it runs before <code>basic_auth</code>.</p> > Related issue: [Issue #3546811](https://www.drupal.org/node/3546811)