fix: update the permission for create and read the api keys

This commit is contained in:
2026-07-11 15:28:52 +07:00
parent 8cd10aefdc
commit 4ac342c5a2
15 changed files with 187 additions and 72 deletions
+1 -1
View File
@@ -46,7 +46,7 @@ const ALWAYS_PROTECTED = [
// User administration is never exposed to normal users, even if dashboard login
// is disabled for local single-user deployments.
const ADMIN_ONLY_PATHS = ["/api/users"];
const ADMIN_ONLY_PATHS = ["/api/users", "/api/tunnel"];
// Require auth, but allow through if requireLogin is disabled
const PROTECTED_API_PATHS = [