fix(center): exempt guild join/members auth endpoints from api-key guard

This commit is contained in:
nav
2026-05-15 00:32:33 +00:00
parent 1eb30348a2
commit 2792f78ada

View File

@@ -27,7 +27,9 @@ export class CenterApiKeyGuard implements CanActivate {
(method === 'POST' && (path === '/auth/login' || path.endsWith('/auth/login'))) ||
(method === 'POST' && (path === '/auth/refresh' || path.endsWith('/auth/refresh'))) ||
(method === 'POST' && (path === '/auth/logout' || path.endsWith('/auth/logout'))) ||
(method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds')));
(method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds'))) ||
(method === 'POST' && (path === '/auth/me/guilds/join' || path.endsWith('/auth/me/guilds/join'))) ||
(method === 'GET' && (path.includes('/auth/guilds/') && path.endsWith('/members')));
if (noApiKeyRequired) {
return true;