/api/get-resources blocks application auth header with RequireSignedInUser

wintbit · Jul 2023

Hello, I'm trying to call /api/get-resources as application alone. However this api does not act the same as other resource apis like /api/get-resource or /api/upload-resource. /api/get-resources calls ApiController.RequireSignedInUser() to auth, which blocks application auth header to access this api (err msg: The user: app/app-built-in doesn't exist). How should casdoor application call /api/get-resources?

hsluoyz · Jul 2023

I think it's a server-side bug, can you make a PR to remove this check?

Topic	Replies	Views	Activity
WebAuthn + TOTP MFA returns invalid_grant "NextMfa" error in OIDC apps Casdoor webauthn mfa oidc	5	99	1d
Does Casdoor support running as a Windows background service? Casdoor	1	89	5d
Where should users change their password or email address? Casdoor	1	88	Oct 8
Demo site unavailable and Google OAuth redirect_uri_mismatch error Casdoor bug oauth sso	3	78	Sep 28
How to set up grok on casbin-gateway? Casdoor	1	77	Sep 27

/api/get-resources blocks application auth header with RequireSignedInUser

Join the conversation

Suggested Topics