From a78f40f7e640d93a0c2abf8f5848f829acdaa232 Mon Sep 17 00:00:00 2001 From: Mrugesh Mohapatra <1884376+raisedadead@users.noreply.github.com> Date: Fri, 11 Apr 2025 11:51:00 -0500 Subject: [PATCH] fix(api): remove authorization checks (#59680) --- api-server/src/server/middlewares/request-authorization.js | 4 ---- .../src/server/middlewares/request-authorization.test.js | 4 ---- 2 files changed, 8 deletions(-) diff --git a/api-server/src/server/middlewares/request-authorization.js b/api-server/src/server/middlewares/request-authorization.js index 7cc94a85338..11c296199f1 100644 --- a/api-server/src/server/middlewares/request-authorization.js +++ b/api-server/src/server/middlewares/request-authorization.js @@ -13,9 +13,7 @@ import { getUserById as _getUserById } from '../utils/user-stats'; const authRE = /^\/auth\//; const confirmEmailRE = /^\/confirm-email$/; const newsShortLinksRE = /^\/n\/|^\/p\//; -const publicApiUserRE = /^\/api\/users\/get-public-profile$/; const publicUserRE = /^\/users\/get-public-profile$/; -const publicApiUsernameRE = /^\/api\/users\/exists$/; const publicUsernameRE = /^\/users\/exists$/; const resubscribeRE = /^\/resubscribe\//; const showCertRE = /^\/certificate\/showCert\//; @@ -34,9 +32,7 @@ const _pathsAllowedREs = [ authRE, confirmEmailRE, newsShortLinksRE, - publicApiUserRE, publicUserRE, - publicApiUsernameRE, publicUsernameRE, resubscribeRE, showCertRE, diff --git a/api-server/src/server/middlewares/request-authorization.test.js b/api-server/src/server/middlewares/request-authorization.test.js index 6d3a00982d5..86ca46d08a7 100644 --- a/api-server/src/server/middlewares/request-authorization.test.js +++ b/api-server/src/server/middlewares/request-authorization.test.js @@ -39,9 +39,7 @@ describe('request-authorization', () => { const authRE = /^\/auth\//; const confirmEmailRE = /^\/confirm-email$/; const newsShortLinksRE = /^\/n\/|^\/p\//; - const publicApiUserRE = /^\/api\/users\/get-public-profile$/; const publicUserRE = /^\/users\/get-public-profile$/; - const publicApiUsernameRE = /^\/api\/users\/exists$/; const publicUsernameRE = /^\/users\/exists$/; const resubscribeRE = /^\/resubscribe\//; const showCertRE = /^\/certificate\/showCert\//; @@ -55,9 +53,7 @@ describe('request-authorization', () => { authRE, confirmEmailRE, newsShortLinksRE, - publicApiUserRE, publicUserRE, - publicApiUsernameRE, publicUsernameRE, resubscribeRE, showCertRE,