ref: api auth (#8791)

This commit is contained in:
2025-05-23 14:48:12 +08:00 committed by GitHub
parent 38a668fbeb
commit 28ab4e2527
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 2 deletions

View file

@ -79,6 +79,7 @@ func Routers() *gin.Engine {
Router.Use(middleware.PasswordExpired())
Router.Use(middleware.WhiteAllow())
Router.Use(middleware.BindDomain())
Router.Use(middleware.ApiAuth())
PrivateGroup := Router.Group("/api/v2/core")
PrivateGroup.Use(middleware.SetPasswordPublicKey())
@ -86,7 +87,6 @@ func Routers() *gin.Engine {
router.InitRouter(PrivateGroup)
}
Router.Use(middleware.ApiAuth())
Router.Use(Proxy())
Router.NoRoute(func(c *gin.Context) {
if !security.HandleNotRoute(c) {

View file

@ -12,7 +12,8 @@ import (
func SessionAuth() gin.HandlerFunc {
return func(c *gin.Context) {
if strings.HasPrefix(c.Request.URL.Path, "/api/v2/core/auth") {
apiReq := c.GetBool("API_AUTH")
if strings.HasPrefix(c.Request.URL.Path, "/api/v2/core/auth") || apiReq {
c.Next()
return
}