{"record":{"id":"1d6e11d2dd57fe0f","repo":"Mintplex-Labs/anything-llm","slug":"invalid-request-1d6e11","errorCode":null,"errorMessage":"Invalid request","messagePattern":"Invalid request","errorType":"http","errorClass":null,"httpStatus":403,"severity":"error","filePath":"server/utils/middleware/multiUserProtected.js","lineNumber":91,"sourceCode":"      return;\n    }\n\n    const user =\n      response.locals?.user ?? (await userFromSession(request, response));\n    if (allowedRoles.includes(user?.role)) {\n      next();\n      return;\n    }\n    return response.sendStatus(401).end();\n  };\n}\n\n// Middleware check on a public route if the instance is in a valid\n// multi-user set up.\nasync function isMultiUserSetup(_request, response, next) {\n  const multiUserMode = await SystemSettings.isMultiUserMode();\n  if (!multiUserMode) {\n    response.status(403).json({\n      error: \"Invalid request\",\n    });\n    return;\n  }\n\n  next();\n  return;\n}\n\nmodule.exports = {\n  ROLES,\n  isSingleUserMode,\n  strictMultiUserRoleValid,\n  flexUserRoleValid,\n  isMultiUserSetup,\n};\n","sourceCodeStart":73,"sourceCodeEnd":108,"githubUrl":"https://github.com/Mintplex-Labs/anything-llm/blob/3aec848f2885144aa8f1e53b9731a04310d5d558/server/utils/middleware/multiUserProtected.js#L73-L108","documentation":"Mode guard in the isMultiUserSetup middleware: SystemSettings.isMultiUserMode() returned false, so the instance runs in single-user mode and the multi-user-only public route is refused with 403 to prevent unauthenticated access.","triggerScenarios":"Multi-user protected route received an invalid request. Triggered when the multiUserProtected middleware cannot resolve a valid user/session for the request (multiUserProtected.js:91).","commonSituations":"See trigger scenarios.","solutions":["Enable Multi-User mode in the AnythingLLM security settings before calling this route.","This middleware (isMultiUserSetup) blocks the route when the instance is not in multi-user mode; no other action is possible."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"3aec848f2885144aa8f1e53b9731a04310d5d558","analyzedAt":"2026-08-18T10:02:21.017Z","contentChangedAt":"2026-08-18T10:02:21.017Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}