bugfix: API访问报403错误

Dragonriver1990 · Dec 25, 2017 · 750fb49 · 750fb49
1 parent 68d569a
commit 750fb49
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/routers/routers.go b/routers/routers.go
@@ -230,6 +230,11 @@ func urlAuth(ctx *macaron.Context, sess session.Store)  {
 	if user.IsAdmin(sess) {
 		return
 	}
+	uri := strings.TrimSpace(ctx.Req.URL.Path)
+	uri = strings.TrimRight(uri, "/")
+	if (strings.HasPrefix(uri, "/api")) {
+		return
+	}
 	// 普通用户允许访问的URL地址
 	allowPaths := []string{
 		"",
@@ -239,10 +244,7 @@ func urlAuth(ctx *macaron.Context, sess session.Store)  {
 		"/user/login",
 		"/user/logout",
 		"/user/editMyPassword",
-		"/api",
 	}
-	uri := strings.TrimSpace(ctx.Req.URL.Path)
-	uri = strings.TrimRight(uri, "/")
 	for _, path := range allowPaths {
 		if path == uri {
 			return