fix(router): disable partial auth feature for relay (#6928)

juspay · Dec 24, 2024 · 931c322 · 931c322
1 parent 9120919
commit 931c322
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/config/deployments/integration_test.toml b/config/deployments/integration_test.toml
@@ -411,7 +411,7 @@ outgoing_enabled = true
 connectors_with_webhook_source_verification_call = "paypal"         # List of connectors which has additional source verification api-call
 
 [unmasked_headers]
-keys = "accept-language,user-agent"
+keys = "accept-language,user-agent,x-profile-id"
 
 [saved_payment_methods]
 sdk_eligible_payment_methods = "card"

diff --git a/config/deployments/production.toml b/config/deployments/production.toml
@@ -427,7 +427,7 @@ outgoing_enabled = true
 connectors_with_webhook_source_verification_call = "paypal"     # List of connectors which has additional source verification api-call
 
 [unmasked_headers]
-keys = "accept-language,user-agent"
+keys = "accept-language,user-agent,x-profile-id"
 
 [saved_payment_methods]
 sdk_eligible_payment_methods = "card"

diff --git a/config/deployments/sandbox.toml b/config/deployments/sandbox.toml
@@ -429,7 +429,7 @@ outgoing_enabled = true
 connectors_with_webhook_source_verification_call = "paypal"        # List of connectors which has additional source verification api-call
 
 [unmasked_headers]
-keys = "accept-language,user-agent"
+keys = "accept-language,user-agent,x-profile-id"
 
 [saved_payment_methods]
 sdk_eligible_payment_methods = "card"

diff --git a/crates/router/src/routes/relay.rs b/crates/router/src/routes/relay.rs
@@ -33,7 +33,7 @@ pub async fn relay(
                 req,
             )
         },
-        &auth::HeaderAuth(auth::ApiKeyAuth),
+        &auth::ApiKeyAuth,
         api_locking::LockAction::NotApplicable,
     ))
     .await
@@ -69,7 +69,7 @@ pub async fn relay_retrieve(
                 req,
             )
         },
-        &auth::HeaderAuth(auth::ApiKeyAuth),
+        &auth::ApiKeyAuth,
         api_locking::LockAction::NotApplicable,
     ))
     .await