check api before authenticate the request (#1441)

* check api before authenticate the request * check api before authenticate the request * check api before authenticate the request --------- Co-authored-by: l30035975 <[email protected]>
apache · Jan 5, 2024 · 93c4d37 · 93c4d37
1 parent ce7afe0
commit 93c4d37
Showing 1 changed file with 3 additions and 7 deletions.
diff --git a/server/plugin/auth/buildin/buildin.go b/server/plugin/auth/buildin/buildin.go
@@ -90,14 +90,10 @@ func getRequestPattern(req *http.Request) string {
 }
 
 func (ba *TokenAuthenticator) mustAuth(req *http.Request, pattern string) (*rbacmodel.Account, error) {
-	account, err := ba.VerifyRequest(req)
-	if err == nil {
-		return account, nil
-	}
-	if rbacsvc.MustAuth(pattern) {
-		return nil, err
+	if !rbacsvc.MustAuth(pattern) {
+		return nil, nil
 	}
-	return nil, nil
+	return ba.VerifyRequest(req)
 }
 
 func (ba *TokenAuthenticator) VerifyRequest(req *http.Request) (*rbacmodel.Account, error) {