marcel/zoraxy
1
0
Fork 0
mirror of https://github.com/tobychui/zoraxy.git synced 2025-08-06 05:08:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(plugin-auth): check both endpoint and method

Browse Source
This commit is contained in:
Anthony Rubick
2025-07-17 23:18:40 -07:00
parent 46cfc02493
commit ed8f9b7337
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/mod/auth/plugin_apikey_manager.go
View File

@@ -84,7 +84,7 @@ func (m *APIKeyManager) ValidateAPIKeyForEndpoint(endpoint string, method string
// Check if the endpoint is permitted // Check if the endpoint is permitted
for _, permittedEndpoint := range pluginAPIKey.PermittedEndpoints { for _, permittedEndpoint := range pluginAPIKey.PermittedEndpoints {
if permittedEndpoint.Endpoint == endpoint { if permittedEndpoint.Endpoint == endpoint && permittedEndpoint.Method == method {
return pluginAPIKey, nil return pluginAPIKey, nil
} }
} }