diff --git a/api/src/api/routes/resources.py b/api/src/api/routes/resources.py index b1ccf2957548ef1d9f5116a0526d4d9974f68917..1210dc9e532fe2f606d6432ac1d1deb97b17053d 100644 --- a/api/src/api/routes/resources.py +++ b/api/src/api/routes/resources.py @@ -86,7 +86,13 @@ def api_route_resource_internal_auth_check(): medium_file = _check_access_medium_file(course_handle, medium_file_id) - if f"{url_result.scheme}://{url_result.netloc}{url_result.path}" != f"{_FILE_PATH_PREFIX}/{medium_file.file_path}": - raise ApiClientException(ERROR_UNAUTHORIZED) + given_url = f"{url_result.scheme}://{url_result.netloc}{url_result.path}" + expected_url = f"{_FILE_PATH_PREFIX}/{medium_file.file_path}" + if given_url != expected_url: + # TODO + print("URLS") + print(given_url) + print(expected_url) + raise ApiClientException(ERROR_BAD_REQUEST("Url does not match medium location")) return {}, HTTP_200_OK