From 9e98aebeb3da240123c2e79ece7bab279635e285 Mon Sep 17 00:00:00 2001 From: Faruk AYDIN Date: Mon, 19 Feb 2024 21:53:21 +0100 Subject: [PATCH] fix: Include http methods for route rules --- packages/backend/src/helpers/authorization.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/packages/backend/src/helpers/authorization.js b/packages/backend/src/helpers/authorization.js index b8d40136..8c20c4f4 100644 --- a/packages/backend/src/helpers/authorization.js +++ b/packages/backend/src/helpers/authorization.js @@ -1,16 +1,17 @@ const authorizationList = { - '/api/v1/users/:userId': { + 'GET /api/v1/users/:userId': { action: 'read', subject: 'User', }, - '/api/v1/users/': { + 'GET /api/v1/users/': { action: 'read', subject: 'User', }, }; export const authorizeUser = async (request, response, next) => { - const currentRoute = request.baseUrl + request.route.path; + const currentRoute = + request.method + ' ' + request.baseUrl + request.route.path; const currentRouteRule = authorizationList[currentRoute]; try {