hllqkb opened a new pull request, #3070:
URL: https://github.com/apache/hugegraph/pull/3070

   ## Summary
   This PR fixes issue #3019 by aligning GroupAPI with all other auth API 
classes.
   
   ## Problem
   All other auth API classes (UserAPI, TargetAPI, BelongAPI, AccessAPI, 
ProjectAPI, ManagerAPI) use the pattern:
   ```java
   @Path("graphspaces/{graphspace}/auth/...")
   ```
   
   But GroupAPI was the outlier:
   ```java
   @Path("/auth/groups")   // WRONG — absolute path, bypasses graphspace
   ```
   
   This inconsistency causes:
   1. The AuthenticationFilter cannot extract the graph space for permission 
checks
   2. Documentation confusion — docs say POST to 
`/graphspaces/DEFAULT/auth/groups` returns 404
   
   ## Fix
   Changed GroupAPI.java line 54:
   ```diff
   -@Path("/auth/groups")
   +@Path("graphspaces/{graphspace}/auth/groups")
   ```
   
   ## Verification
   - All 6 other auth APIs confirmed using `graphspaces/{graphspace}/auth/...` 
pattern
   - One-line change, no other modifications needed
   - Git diff confirmed minimal and targeted
   
   Fixes #3019


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to