feat: improve isAllowedInDemoMode()

carlhopf · Jan 17, 2024 · 0f6b798 · 0f6b798
1 parent ba9d6e5
commit 0f6b798
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/authz/authz.go b/authz/authz.go
@@ -150,7 +150,7 @@ func IsAllowed(subOwner string, subName string, method string, urlPath string, o
 
 func isAllowedInDemoMode(subOwner string, subName string, method string, urlPath string, objOwner string, objName string) bool {
 	if method == "POST" {
-		if strings.HasPrefix(urlPath, "/api/login") || urlPath == "/api/logout" || urlPath == "/api/signup" || urlPath == "/api/callback" || urlPath == "/api/send-verification-code" || urlPath == "/api/send-email" || urlPath == "/api/verify-captcha" || urlPath == "/api/check-user-password" || strings.HasPrefix(urlPath, "/api/mfa/") {
+		if strings.HasPrefix(urlPath, "/api/login") || urlPath == "/api/logout" || urlPath == "/api/signup" || urlPath == "/api/callback" || urlPath == "/api/send-verification-code" || urlPath == "/api/send-email" || urlPath == "/api/verify-captcha" || urlPath == "/api/verify-code" || urlPath == "/api/check-user-password" || strings.HasPrefix(urlPath, "/api/mfa/") {
 			return true
 		} else if urlPath == "/api/update-user" {
 			// Allow ordinary users to update their own information

diff --git a/web/src/locales/zh/data.json b/web/src/locales/zh/data.json
@@ -271,7 +271,7 @@
     "Non-LDAP": "禁用LDAP",
     "None": "无",
     "OAuth providers": "OAuth提供方",
-    "OK": "OK",
+    "OK": "确定",
     "Organization": "组织",
     "Organization - Tooltip": "类似于租户、用户池等概念，每个用户和应用都从属于一个组织",
     "Organizations": "组织",