This is an automated email from the ASF dual-hosted git repository.

klesh pushed a commit to branch kw-serfix
in repository https://gitbox.apache.org/repos/asf/devlake.git

commit d0d496c182137c49c48c9c152bc1b8b42e55265a
Author: Klesh Wong <[email protected]>
AuthorDate: Sat Aug 8 08:33:33 2026 +0800

    fix: abort request context when apikey doesn't match
---
 backend/server/api/middlewares.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/server/api/middlewares.go 
b/backend/server/api/middlewares.go
index e1609b1ec..cb465e1c8 100644
--- a/backend/server/api/middlewares.go
+++ b/backend/server/api/middlewares.go
@@ -264,6 +264,7 @@ func CheckAuthorizationHeader(c *gin.Context, logger 
log.Logger, db dal.Dal, api
                return false
        }
        if !matched {
+               c.Abort()
                c.JSON(http.StatusForbidden, &apiBody{
                        Success: false,
                        Message: "path doesn't match api key's scope",

Reply via email to