1Panel-dev/1Panel
1
1
Fork 0
mirror of https://github.com/1Panel-dev/1Panel.git synced 2025-12-16 20:42:40 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

ref: api auth (#8791)

Browse source
This commit is contained in:
蘭 2025-05-23 14:48:12 +08:00 • committed by GitHub
parent 38a668fbeb
commit 28ab4e2527
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
core/init/router/router.go
View file

@ -79,6 +79,7 @@ func Routers() *gin.Engine {
Router.Use(middleware.PasswordExpired()) Router.Use(middleware.PasswordExpired())
Router.Use(middleware.WhiteAllow()) Router.Use(middleware.WhiteAllow())
Router.Use(middleware.BindDomain()) Router.Use(middleware.BindDomain())
Router.Use(middleware.ApiAuth())
PrivateGroup := Router.Group("/api/v2/core") PrivateGroup := Router.Group("/api/v2/core")
PrivateGroup.Use(middleware.SetPasswordPublicKey()) PrivateGroup.Use(middleware.SetPasswordPublicKey())
@ -86,7 +87,6 @@ func Routers() *gin.Engine {
router.InitRouter(PrivateGroup) router.InitRouter(PrivateGroup)
} }
Router.Use(middleware.ApiAuth())
Router.Use(Proxy()) Router.Use(Proxy())
Router.NoRoute(func(c *gin.Context) { Router.NoRoute(func(c *gin.Context) {
if !security.HandleNotRoute(c) { if !security.HandleNotRoute(c) {

3
core/middleware/session.go
View file

@ -12,7 +12,8 @@ import (
func SessionAuth() gin.HandlerFunc { func SessionAuth() gin.HandlerFunc {
return func(c *gin.Context) { return func(c *gin.Context) {
if strings.HasPrefix(c.Request.URL.Path, "/api/v2/core/auth") { apiReq := c.GetBool("API_AUTH")
if strings.HasPrefix(c.Request.URL.Path, "/api/v2/core/auth") || apiReq {
c.Next() c.Next()
return return
} }