Merge pull request #150 from vtex-apps/hotfix/b2b-checkout-skip-auth-…

…token-validation fix: skip auth token validation for b2b-checkout-settings
vtex-apps · Feb 29, 2024 · 46db4cf · 46db4cf
2 parents 1f049e8 + 9a236d6
commit 46db4cf
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Fixed
+
+- Skip auth token validation when the x-vtex-caller is b2b-checkout-settings
+
 ## [0.48.4] - 2024-02-28
 
 ### Fixed

diff --git a/node/resolvers/directives/checkUserAccess.ts b/node/resolvers/directives/checkUserAccess.ts
@@ -28,6 +28,9 @@ export class CheckUserAccess extends SchemaDirectiveVisitor {
       if (
         context.headers?.['x-vtex-caller']?.indexOf(
           'vtex.storefront-permissions'
+        ) !== -1 ||
+        context.headers?.['x-vtex-caller']?.indexOf(
+          'vtex.b2b-checkout-settings'
         ) !== -1
       ) {
         return resolve(root, args, context, info)