diff --git a/kernel/api/router.go b/kernel/api/router.go index 6b8a3ad7d04..d6a2cf2a43d 100644 --- a/kernel/api/router.go +++ b/kernel/api/router.go @@ -34,7 +34,6 @@ func ServeAPI(ginServer *gin.Engine) { ginServer.Handle("POST", "/api/system/logoutAuth", model.LogoutAuth) ginServer.Handle("GET", "/api/system/getCaptcha", model.GetCaptcha) ginServer.Handle("POST", "/api/system/setUILayout", setUILayout) // 这里不加鉴权 After modifying the access authentication code on the browser side, the other side does not refresh https://github.com/siyuan-note/siyuan/issues/8028 - ginServer.Handle("POST", "/api/system/getNetwork", getNetwork) // 启动时获取网络设置,不能加鉴权 ginServer.Handle("GET", "/snippets/*filepath", serveSnippets) // 需要鉴权 @@ -63,6 +62,7 @@ func ServeAPI(ginServer *gin.Engine) { ginServer.Handle("POST", "/api/system/checkUpdate", model.CheckAuth, checkUpdate) ginServer.Handle("POST", "/api/system/exportLog", model.CheckAuth, exportLog) ginServer.Handle("POST", "/api/system/getChangelog", model.CheckAuth, getChangelog) + ginServer.Handle("POST", "/api/system/getNetwork", model.CheckAuth, getNetwork) ginServer.Handle("POST", "/api/storage/setLocalStorage", model.CheckAuth, model.CheckReadonly, setLocalStorage) ginServer.Handle("POST", "/api/storage/getLocalStorage", model.CheckAuth, getLocalStorage) diff --git a/kernel/model/session.go b/kernel/model/session.go index d9298d1049d..e14a4452a01 100644 --- a/kernel/model/session.go +++ b/kernel/model/session.go @@ -206,6 +206,10 @@ func CheckAuth(c *gin.Context) { c.Next() return } + if strings.HasPrefix(c.Request.RequestURI, "/api/system/getNetwork") { + c.Next() + return + } } // 通过 Cookie