klesh opened a new pull request, #8893: URL: https://github.com/apache/incubator-devlake/pull/8893
### Summary This PR updates the /proceed-db-migration API endpoint to require authentication if authentication is enabled. Previously, this endpoint was accessible without authentication, which could pose a security risk in protected environments. ### Changes - Added the auth.RequireAuth() middleware to the /proceed-db-migration route in the API server. - Removed /proceed-db-migration from the list of public paths in the authentication middleware. - Updated test helper comments to note that credentials are now required for this endpoint when AUTH_ENABLED=true. ### Motivation Securing the database migration endpoint ensures that only authorized users can trigger migrations, aligning with best practices for production deployments. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
