wangdl/api-server
2
0
Fork 0
Code Issues 28 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow /admin/ paths through global JwtAuthGuard
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 45s
Details

Browse Source 
Global JwtAuthGuard was blocking /admin/learning/* requests before
AdminAuthGuard could process x-api-key. Now bypasses all /admin/*
paths (not just /admin-api/*), letting controller-level admin auth
handle those routes.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
wangdl 2026-06-18 18:58:56 +08:00
parent ed2dcb02f6
commit bc11adfbac
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/common/guards/jwt-auth.guard.ts
View File

@ -33,7 +33,7 @@ export class JwtAuthGuard implements CanActivate {
const request = context.switchToHttp().getRequest<Request>();
// Admin and internal routes use their own auth guards
if (request.path.startsWith('/admin-api') || request.path.startsWith('/internal')) {
if (request.path.startsWith('/admin') || request.path.startsWith('/internal')) {
return true;
}