lekss361/gendesign
1
0
Fork 0
Code Issues 141 Pull requests Projects Releases Packages Wiki Activity Actions

fix(tradein/auth): убрать устаревшее «Caddy basic_auth required» из 401 (#2573) #2649

Merged
bot-backend merged 1 commit from fix/tradein-401-wording into main 2026-08-05 08:45:57 +00:00
Conversation 0 Commits 1 Files changed 3 +4 -4
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
tradein-mvp/backend/app/api/v1/me.py
View file

@ -78,7 +78,7 @@ async def me(
if not x_authenticated_user: if not x_authenticated_user:
raise HTTPException( raise HTTPException(
status_code=401, status_code=401,
detail="no authenticated user (Caddy basic_auth required)", detail="no authenticated user (valid session required)",
) )
try: try:
return get_user_scope(x_authenticated_user) return get_user_scope(x_authenticated_user)

4
tradein-mvp/backend/app/api/v1/trade_in.py
View file

@ -63,7 +63,7 @@ def _assert_estimate_access(created_by: str | None, x_authenticated_user: str |
if not x_authenticated_user: if not x_authenticated_user:
raise HTTPException( raise HTTPException(
status_code=401, status_code=401,
detail="no authenticated user (Caddy basic_auth required)", detail="no authenticated user (valid session required)",
) )
from app.core.auth import get_role from app.core.auth import get_role
@ -688,7 +688,7 @@ def estimate_history(
if not x_authenticated_user: if not x_authenticated_user:
raise HTTPException( raise HTTPException(
status_code=401, status_code=401,
detail="no authenticated user (Caddy basic_auth required)", detail="no authenticated user (valid session required)",
) )
from app.core.auth import get_role from app.core.auth import get_role

2
tradein-mvp/backend/app/core/rbac.py
View file

@ -222,7 +222,7 @@ async def rbac_guard(
if not username: if not username:
return JSONResponse( return JSONResponse(
status_code=401, status_code=401,
content={"detail": "no authenticated user (Caddy basic_auth required)"}, content={"detail": "no authenticated user (valid session required)"},
) )
# #2213 defense-in-depth: если общий секрет задан — запрос с X-Authenticated-User # #2213 defense-in-depth: если общий секрет задан — запрос с X-Authenticated-User