fix(router): AdminWrite scope should be required for OneDrive OAuth callback

2026-09-19 01:55:06 +08:00 · 2026-06-13 11:09:54 +08:00
parent 0b00dd308f
commit 9e9fb43e72
1 changed files with 1 additions and 0 deletions
@@ -1007,6 +1007,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 					{
 						// 获取 OneDrive OAuth URL
 						oauth.POST("signin",
+							middleware.RequiredScopes(types.ScopeAdminWrite),
 							controllers.FromJSON[adminsvc.GetOauthRedirectService](adminsvc.GetOauthRedirectParamCtx{}),
 							controllers.AdminOdOAuthURL,
 						)