pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-08-06 15:22:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): require auth for /v1/models when management auth is configured (#9320)

Browse Source
This commit is contained in:
Diego Rodrigues de Sa e Souza
2026-08-04 21:36:41 -03:00
committed by GitHub
parent 7e55abbc41
commit b07182c72a
3 changed files with 103 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/app/api/v1/models/catalogRequest.ts
View File

@@ -14,7 +14,9 @@ export async function getModelCatalogAuthRejection(
settings: Record<string, any>,
headers: Record<string, string>
): Promise<Response | null> {
if (settings.requireAuthForModels !== true || !(await isAuthRequired(request))) return null;
const authRequired = await isAuthRequired(request);
if (!authRequired) return null;
if (settings.requireAuthForModels === false) return null;
const apiKey = extractApiKey(request);
if (apiKey) {