Skip Request Authorization Middleware

/Policy/RequestPolicy.php
namespace App\Policy;

use Authorization\Policy\RequestPolicyInterface;
use Cake\Http\ServerRequest;

class RequestPolicy implements RequestPolicyInterface
{
public function canAccess($identity, ServerRequest $request)
{
$prefix = $request->getParam(‘prefix’);
if(empty($prefix)) {
return true;
}
}
this worket for me