diff --git a/ahserver/auth_api.py b/ahserver/auth_api.py index e742fdd..2ddf99c 100755 --- a/ahserver/auth_api.py +++ b/ahserver/auth_api.py @@ -58,11 +58,10 @@ class AuthAPI(AppLogger): @web.middleware async def checkAuth(self,request,handler): path = request.path - if not await self.needAuth(path): - return await handler(request) user = await auth.get_auth(request) is_ok = await self.checkUserPermission(user, path) if is_ok: + print(f'**{user=}, {path} access **') return await handler(request) print(f'**{user=}, {path} forbidden**') raise web.HTTPForbidden()