mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-04 06:26:16 +00:00
misc: added missing auth check for rate-limit endpoint
This commit is contained in:
@@ -21,6 +21,11 @@ export const registerRateLimitRouter = async (server: FastifyZodProvider) => {
|
|||||||
})
|
})
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
|
onRequest: (req, res, done) => {
|
||||||
|
verifyAuth([AuthMode.JWT])(req, res, () => {
|
||||||
|
verifySuperAdmin(req, res, done);
|
||||||
|
});
|
||||||
|
},
|
||||||
handler: async () => {
|
handler: async () => {
|
||||||
const rateLimit = await server.services.rateLimit.getRateLimits();
|
const rateLimit = await server.services.rateLimit.getRateLimits();
|
||||||
if (!rateLimit) {
|
if (!rateLimit) {
|
||||||
@@ -40,7 +45,7 @@ export const registerRateLimitRouter = async (server: FastifyZodProvider) => {
|
|||||||
rateLimit: readLimit
|
rateLimit: readLimit
|
||||||
},
|
},
|
||||||
onRequest: (req, res, done) => {
|
onRequest: (req, res, done) => {
|
||||||
verifyAuth([AuthMode.JWT, AuthMode.API_KEY])(req, res, () => {
|
verifyAuth([AuthMode.JWT])(req, res, () => {
|
||||||
verifySuperAdmin(req, res, done);
|
verifySuperAdmin(req, res, done);
|
||||||
});
|
});
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in New Issue
Block a user