From ebde00b33ebb84a0d960e8240c4d76497f4aec5c Mon Sep 17 00:00:00 2001 From: Tsuyumi Date: Sun, 27 Oct 2024 20:52:04 +0800 Subject: [PATCH] fix(middleware): use URL pathname to maintain exact user access path for access control --- lib/middleware/access-control.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/middleware/access-control.ts b/lib/middleware/access-control.ts index 2ba1b237c764f..dade5f26608ca 100644 --- a/lib/middleware/access-control.ts +++ b/lib/middleware/access-control.ts @@ -8,7 +8,7 @@ const reject = () => { }; const middleware: MiddlewareHandler = async (ctx, next) => { - const requestPath = ctx.req.path; + const requestPath = new URL(ctx.req.url).pathname; const accessKey = ctx.req.query('key'); const accessCode = ctx.req.query('code');