This commit is contained in:
@@ -398,7 +398,11 @@ namespace AyaNova
|
||||
context.Request.HttpContext.Items["AY_TRANSLATION_ID"] = u.translationId;
|
||||
|
||||
//CHECK JWT
|
||||
if (!context.Request.Path.Value.EndsWith("/auth") && u.currentAuthToken != JWT)//except "/api/v8/auth" so user can login
|
||||
if (
|
||||
!context.Request.Path.Value.EndsWith("/auth") &&
|
||||
!context.Request.Path.Value.EndsWith("notify/hello") &&
|
||||
u.currentAuthToken != JWT
|
||||
)//except "/api/v8/auth" and prelogin notify/hello routes so user can login
|
||||
{
|
||||
context.Response.StatusCode = 401;
|
||||
context.Response.Headers.Add("X-AyaNova-Authorization-Error", "E2006 - Authorization token replaced by more recent login");
|
||||
|
||||
Reference in New Issue
Block a user