check api before authenticate the request

apache · Dec 28, 2023 · 8c4ab94 · 8c4ab94
1 parent ce7afe0
commit 8c4ab94
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/server/plugin/auth/buildin/buildin.go b/server/plugin/auth/buildin/buildin.go
@@ -57,6 +57,10 @@ func (ba *TokenAuthenticator) Identify(req *http.Request) error {
 
 	pattern := getRequestPattern(req)
 
+	if !rbacsvc.MustAuth(pattern) {
+		return nil
+	}
+
 	account, err := ba.mustAuth(req, pattern)
 	if account == nil || err != nil {
 		return err