search

vertexcover-io / falcon-auth

A falcon middleware + authentication backends that adds authentication layer to you app/api service.
MIT License
103 stars 31 forks source link

exempt_routes gets appended with auth disabled route on every call #34

Open volinthius opened 5 years ago

volinthius commented 5 years ago

In FalconAuthMiddleware the exempt_routes list gets appended with auth disabled route on every call to a resource which has auth_disabled set:

    def _get_auth_settings(self, req, resource):
        ...
        if auth_settings.get('auth_disabled'):
            auth_settings['exempt_routes'].append(req.uri_template)
        ...

This causes the list to grow indefinitely.