allow api key in header when no master-key is set; fix #515

2020-03-10 15:40:44 +01:00 · 2020-03-10 15:40:44 +01:00 · 8204d961de
parent ef3bcd65ab
commit 8204d961de
1 changed files with 4 additions and 0 deletions
--- a/meilisearch-http/src/helpers/tide.rs
+++ b/meilisearch-http/src/helpers/tide.rs
@ -20,6 +20,10 @@ impl RequestExt for Request<Data> {
    fn is_allowed(&self, acl: ACL) -> SResult<()> {
        let user_api_key = self.header("X-Meili-API-Key");

+        if self.state().api_keys.master.is_none() {
+            return Ok(())
+        }
+
        match acl {
            ACL::Admin => {
                if user_api_key == self.state().api_keys.master.as_deref() {