From d0d496c182137c49c48c9c152bc1b8b42e55265a Mon Sep 17 00:00:00 2001
From: Klesh Wong <klesh@qq.com>
Date: Sat, 8 Aug 2026 08:33:33 +0800
Subject: [PATCH] fix: abort request context when apikey doesn't match

---
 backend/server/api/middlewares.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/server/api/middlewares.go b/backend/server/api/middlewares.go
index e1609b1ec6a..cb465e1c86d 100644
--- a/backend/server/api/middlewares.go
+++ b/backend/server/api/middlewares.go
@@ -264,6 +264,7 @@ func CheckAuthorizationHeader(c *gin.Context, logger log.Logger, db dal.Dal, api
 		return false
 	}
 	if !matched {
+		c.Abort()
 		c.JSON(http.StatusForbidden, &apiBody{
 			Success: false,
 			Message: "path doesn't match api key's scope",