fix(plugin-auth): check both endpoint and method

This commit is contained in:
Anthony Rubick
2025-07-17 23:18:40 -07:00
parent 46cfc02493
commit ed8f9b7337

View File

@@ -84,7 +84,7 @@ func (m *APIKeyManager) ValidateAPIKeyForEndpoint(endpoint string, method string
// Check if the endpoint is permitted
for _, permittedEndpoint := range pluginAPIKey.PermittedEndpoints {
if permittedEndpoint.Endpoint == endpoint {
if permittedEndpoint.Endpoint == endpoint && permittedEndpoint.Method == method {
return pluginAPIKey, nil
}
}