fix(center): exempt guild join/members auth endpoints from api-key guard
This commit is contained in:
@@ -27,7 +27,9 @@ export class CenterApiKeyGuard implements CanActivate {
|
||||
(method === 'POST' && (path === '/auth/login' || path.endsWith('/auth/login'))) ||
|
||||
(method === 'POST' && (path === '/auth/refresh' || path.endsWith('/auth/refresh'))) ||
|
||||
(method === 'POST' && (path === '/auth/logout' || path.endsWith('/auth/logout'))) ||
|
||||
(method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds')));
|
||||
(method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds'))) ||
|
||||
(method === 'POST' && (path === '/auth/me/guilds/join' || path.endsWith('/auth/me/guilds/join'))) ||
|
||||
(method === 'GET' && (path.includes('/auth/guilds/') && path.endsWith('/members')));
|
||||
|
||||
if (noApiKeyRequired) {
|
||||
return true;
|
||||
|
||||
Reference in New Issue
Block a user