From 669b4cfcdd37ab1cafa5bf0c86ab4c2093ebfa68 Mon Sep 17 00:00:00 2001 From: Matteo Gheza Date: Thu, 7 Sep 2023 15:51:55 +0200 Subject: [PATCH] Do not send token for asset requests --- frontend/src/app/_providers/auth-interceptor.provider.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/frontend/src/app/_providers/auth-interceptor.provider.ts b/frontend/src/app/_providers/auth-interceptor.provider.ts index edf5a1a..1eb1c0f 100644 --- a/frontend/src/app/_providers/auth-interceptor.provider.ts +++ b/frontend/src/app/_providers/auth-interceptor.provider.ts @@ -74,7 +74,11 @@ export class AuthInterceptor implements HttpInterceptor { updateRequest(req: HttpRequest): HttpRequest { //If request is absolute, don't add XSRF token or Bearer token - if (req.url.startsWith('http') || req.url.startsWith('//')) return req; + if ( + req.url.startsWith('http') || + req.url.startsWith('//') || + req.url.includes('/assets/') + ) return req; req = this.addXsrfToken(req); if(this.authToken.getToken() !== '') req = this.addBearerToken(req);