버그 수정: 일반 사용자 승인 체크 단계에서 어드민 예외 누락 보완 및 중첩 슬래시 라우팅 방어

2026-05-26 22:04:29 +09:00
parent b2ecd896f5
commit db58c384f1
2 changed files with 5 additions and 2 deletions
@@ -103,7 +103,7 @@ def get_current_user(request: Request, db: Session = Depends(get_db)):
            )
        user = _provision_user(db, email, name)

-    if not user.is_approved and not user.is_admin:
+    if not user.is_approved and not user.is_admin and email.lower() not in ADMIN_EMAILS:
        raise HTTPException(
            status_code=status.HTTP_403_FORBIDDEN,
            detail="User is not approved by administrator",