cinnabarflower/mnemo_cards
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

url
Some checks are pending
Backend CI / test (push) Waiting to run
Details
Backend CI / build (push) Blocked by required conditions
Details
Deploy Mnemo Cards / Deploy Backend (push) Waiting to run
Details
Deploy Mnemo Cards / Deploy Web App (push) Blocked by required conditions
Details
Deploy Mnemo Cards / Final Verification (push) Blocked by required conditions
Details

Browse source
This commit is contained in:
Dmitry 2025-12-11 21:48:12 +03:00
parent 8224c1334a
commit 387fff9798
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
mnemo_cards_backend/lib/api/v2/authorize_v2.dart
View file

@ -43,6 +43,9 @@ Middleware authorizeV2(UserManager userManager, JwtService jwtService) {
if (!normalizedPath.startsWith('/')) {
normalizedPath = '/$normalizedPath';
}
if (normalizedPath.endsWith('/')) {
normalizedPath = normalizedPath.substring(0, normalizedPath.length - 1);
}
// Check if this is a telegram-bot endpoint - skip JWT auth (handled by API key middleware)
if (normalizedPath.startsWith('/telegram-bot/')) {
@ -56,7 +59,7 @@ Middleware authorizeV2(UserManager userManager, JwtService jwtService) {
return await innerHandler(request);
}
// Check for dynamic auth paths (e.g., /auth/telegram/code-status/<code>)
if (normalizedPath.startsWith('/auth/telegram/code-status/')
if (normalizedPath.startsWith('/auth/telegram/code-status')
|| normalizedPath.startsWith('/admin/auth/request-code')
|| normalizedPath.startsWith('/admin/auth/verify-code')) {
// Code status endpoint is public (used before authentication)