diff --git a/packages/api/src/controllers/auth.js b/packages/api/src/controllers/auth.js index 0cb38bfa2..3f4c397cc 100644 --- a/packages/api/src/controllers/auth.js +++ b/packages/api/src/controllers/auth.js @@ -25,7 +25,9 @@ function authMiddleware(req, res, next) { // console.log('********************* getAuthProvider()', getAuthProvider()); - if (!getAuthProvider().shouldAuthorizeApi()) { + const isAdminPage = req.headers['x-is-admin-page'] == 'true'; + + if (!isAdminPage && !getAuthProvider().shouldAuthorizeApi()) { return next(); } let skipAuth = !!SKIP_AUTH_PATHS.find(x => req.path == getExpressPath(x)); diff --git a/packages/web/src/utility/resolveApi.ts b/packages/web/src/utility/resolveApi.ts index 33f09eb41..40329867b 100644 --- a/packages/web/src/utility/resolveApi.ts +++ b/packages/web/src/utility/resolveApi.ts @@ -21,5 +21,8 @@ export function resolveApiHeaders() { if (accessToken) { res['Authorization'] = `Bearer ${accessToken}`; } + if (isAdminPage()) { + res['x-is-admin-page'] = 'true'; + } return res; }