bugfix: API访问报403错误

This commit is contained in:
ouqiang
2017-12-25 23:55:23 +08:00
parent 68d569a6de
commit 750fb49a37
+5 -3
View File
@@ -230,6 +230,11 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
if user.IsAdmin(sess) {
return
}
uri := strings.TrimSpace(ctx.Req.URL.Path)
uri = strings.TrimRight(uri, "/")
if (strings.HasPrefix(uri, "/api")) {
return
}
// 普通用户允许访问的URL地址
allowPaths := []string{
"",
@@ -239,10 +244,7 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
"/user/login",
"/user/logout",
"/user/editMyPassword",
"/api",
}
uri := strings.TrimSpace(ctx.Req.URL.Path)
uri = strings.TrimRight(uri, "/")
for _, path := range allowPaths {
if path == uri {
return