From cdceed99bea6833ccf6e0d6aa4358ec7bc2e750c Mon Sep 17 00:00:00 2001 From: shaohuzhang1 Date: Fri, 6 Nov 2026 14:44:19 +0800 Subject: [PATCH 1/2] fix: The Appapi switch is ineffective. --- apps/common/auth/handle/impl/application_key.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/apps/common/auth/handle/impl/application_key.py b/apps/common/auth/handle/impl/application_key.py index 661f3b5ca98..fa2d596aa65 100644 --- a/apps/common/auth/handle/impl/application_key.py +++ b/apps/common/auth/handle/impl/application_key.py @@ -21,6 +21,7 @@ class ApplicationKey(AuthBaseHandle): def handle(self, request, token: str, get_token_details): application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=token).first() + QuerySet() if application_api_key is None: raise AppAuthenticationFailed(500, _("Secret key is invalid")) if not application_api_key.is_active: @@ -31,10 +32,13 @@ def handle(self, request, token: str, get_token_details): QuerySet(ApplicationAccessToken).filter(application_id=application_api_key.application_id).first() ) if application_access_token is not None: + if not application_access_token.enable_api_key: + raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) if application_access_token.authentication: if application_access_token.authentication_value.get("type", "password") != "password": raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) - + else: + raise AppAuthenticationFailed(1002, _("Authentication information is incorrect")) k = f"{Group.CHAT_USER}:r:{application_access_token.application_id}" return Principal( str(application_api_key.id), From bc9431d377d21f8f61541dacc356bebeffe5e8b8 Mon Sep 17 00:00:00 2001 From: shaohuzhang1 Date: Fri, 6 Nov 2026 14:45:57 +0800 Subject: [PATCH 2/2] fix: The Appapi switch is ineffective. --- apps/common/auth/handle/impl/application_key.py | 1 - 1 file changed, 1 deletion(-) diff --git a/apps/common/auth/handle/impl/application_key.py b/apps/common/auth/handle/impl/application_key.py index fa2d596aa65..8fd3bd09dbd 100644 --- a/apps/common/auth/handle/impl/application_key.py +++ b/apps/common/auth/handle/impl/application_key.py @@ -21,7 +21,6 @@ class ApplicationKey(AuthBaseHandle): def handle(self, request, token: str, get_token_details): application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=token).first() - QuerySet() if application_api_key is None: raise AppAuthenticationFailed(500, _("Secret key is invalid")) if not application_api_key.is_active: