hllqkb opened a new pull request, #3070:
URL: https://github.com/apache/hugegraph/pull/3070
## Summary
This PR fixes issue #3019 by aligning GroupAPI with all other auth API
classes.
## Problem
All other auth API classes (UserAPI, TargetAPI, BelongAPI, AccessAPI,
ProjectAPI, ManagerAPI) use the pattern:
```java
@Path("graphspaces/{graphspace}/auth/...")
```
But GroupAPI was the outlier:
```java
@Path("/auth/groups") // WRONG — absolute path, bypasses graphspace
```
This inconsistency causes:
1. The AuthenticationFilter cannot extract the graph space for permission
checks
2. Documentation confusion — docs say POST to
`/graphspaces/DEFAULT/auth/groups` returns 404
## Fix
Changed GroupAPI.java line 54:
```diff
-@Path("/auth/groups")
+@Path("graphspaces/{graphspace}/auth/groups")
```
## Verification
- All 6 other auth APIs confirmed using `graphspaces/{graphspace}/auth/...`
pattern
- One-line change, no other modifications needed
- Git diff confirmed minimal and targeted
Fixes #3019
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]