mirror of
https://github.com/ouqiang/gocron.git
synced 2024-04-21 12:31:58 +00:00
bugfix: API访问报403错误
This commit is contained in:
+5
-3
@@ -230,6 +230,11 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
|
||||
if user.IsAdmin(sess) {
|
||||
return
|
||||
}
|
||||
uri := strings.TrimSpace(ctx.Req.URL.Path)
|
||||
uri = strings.TrimRight(uri, "/")
|
||||
if (strings.HasPrefix(uri, "/api")) {
|
||||
return
|
||||
}
|
||||
// 普通用户允许访问的URL地址
|
||||
allowPaths := []string{
|
||||
"",
|
||||
@@ -239,10 +244,7 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
|
||||
"/user/login",
|
||||
"/user/logout",
|
||||
"/user/editMyPassword",
|
||||
"/api",
|
||||
}
|
||||
uri := strings.TrimSpace(ctx.Req.URL.Path)
|
||||
uri = strings.TrimRight(uri, "/")
|
||||
for _, path := range allowPaths {
|
||||
if path == uri {
|
||||
return
|
||||
|
||||
Reference in New Issue
Block a user