From ed9ebfac4d95cffeb0ac7604f1c8b68b821676bb Mon Sep 17 00:00:00 2001
From: JeffJiang <for-eleven@hotmail.com>
Date: Sun, 26 Apr 2026 22:49:27 +0800
Subject: [PATCH] fix: enforce 'request' parameter requirement in require_auth
 decorator

---
 backend/app/gateway/authz.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/app/gateway/authz.py b/backend/app/gateway/authz.py
index b41a8020d..837c66fe2 100644
--- a/backend/app/gateway/authz.py
+++ b/backend/app/gateway/authz.py
@@ -171,7 +171,7 @@ def require_auth[**P, T](func: Callable[P, T]) -> Callable[P, T]:
             if "request" in inspect.signature(func).parameters:
                 kwargs["request"] = _make_test_request_stub()
             else:
-                return await func(*args, **kwargs)
+                raise ValueError("require_auth decorator requires 'request' parameter")
             request = kwargs["request"]
 
         if getattr(request, "_deerflow_test_bypass_auth", False):