return missing error

interuss · Sep 6, 2024 · 3862a07 · 3862a07
1 parent 805ea3e
commit 3862a07
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/pkg/auth/auth.go b/pkg/auth/auth.go
@@ -197,8 +197,8 @@ func (a *Authorizer) Authorize(_ http.ResponseWriter, r *http.Request, authOptio
 	} else {
 		// Use previously decoded values
 		missing, ok = r.Context().Value("authTokenMissing").(bool)
-		if !ok || missing {
-			return api.AuthorizationResult{Error: stacktrace.NewErrorWithCode(dsserr.Unauthenticated, "Missing access token")}
+		if !ok {
+			missing = true
 		}
 
 		validated, ok = r.Context().Value("authValidated").(bool)
@@ -217,6 +217,10 @@ func (a *Authorizer) Authorize(_ http.ResponseWriter, r *http.Request, authOptio
 		}
 	}
 
+	if missing {
+		return api.AuthorizationResult{Error: stacktrace.NewErrorWithCode(dsserr.Unauthenticated, "Missing access token")}
+	}
+
 	if !validated {
 		return api.AuthorizationResult{Error: stacktrace.PropagateWithCode(err, dsserr.Unauthenticated, "Access token validation failed")}
 	}