bugfix: API访问报403错误

pull/21/merge
ouqiang 2017-12-25 23:55:23 +08:00
parent 68d569a6de
commit 750fb49a37
1 changed files with 5 additions and 3 deletions

View File

@ -230,6 +230,11 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
if user.IsAdmin(sess) { if user.IsAdmin(sess) {
return return
} }
uri := strings.TrimSpace(ctx.Req.URL.Path)
uri = strings.TrimRight(uri, "/")
if (strings.HasPrefix(uri, "/api")) {
return
}
// 普通用户允许访问的URL地址 // 普通用户允许访问的URL地址
allowPaths := []string{ allowPaths := []string{
"", "",
@ -239,10 +244,7 @@ func urlAuth(ctx *macaron.Context, sess session.Store) {
"/user/login", "/user/login",
"/user/logout", "/user/logout",
"/user/editMyPassword", "/user/editMyPassword",
"/api",
} }
uri := strings.TrimSpace(ctx.Req.URL.Path)
uri = strings.TrimRight(uri, "/")
for _, path := range allowPaths { for _, path := range allowPaths {
if path == uri { if path == uri {
return return