diff --git a/apps/common/auth/handle/impl/application_key.py b/apps/common/auth/handle/impl/application_key.py index 661f3b5ca98..8fd3bd09dbd 100644 --- a/apps/common/auth/handle/impl/application_key.py +++ b/apps/common/auth/handle/impl/application_key.py @@ -31,10 +31,13 @@ def handle(self, request, token: str, get_token_details): QuerySet(ApplicationAccessToken).filter(application_id=application_api_key.application_id).first() ) if application_access_token is not None: + if not application_access_token.enable_api_key: + raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) if application_access_token.authentication: if application_access_token.authentication_value.get("type", "password") != "password": raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) - + else: + raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) k = f"{Group.CHAT_USER}:r:{application_access_token.application_id}" return Principal( str(application_api_key.id),