前端提交

2026-09-13 15:56:54 +08:00
parent 0ee3e894e7
commit e38ece32bf
94 changed files with 10808 additions and 40 deletions
@@ -55,7 +55,10 @@ async def build_request_context(
        # 令牌非法、账号停用、角色读取失败一律按 401 处理，形态完全一致。
        raise unauthorized() from exc
    request.state.request_context = context
-    if not request.url.path.startswith("/api/v1/onboarding/"):
+    if (
+        "customer" in context.roles
+        and not request.url.path.startswith("/api/v1/onboarding/")
+    ):
        from app.service.risk_questionnaire_service import RiskQuestionnaireService

        if await RiskQuestionnaireService().is_required(context):