Merge pull request #157 from Umimaso/widget

feat: add widget endpoints, routing for unversioned api requests

1 files changed, 7 insertions, 6 deletions

diff --git a/src/middlewares/Authentication.ts b/src/middlewares/Authentication.ts

index 630a45ff..4b0f2b38 100644
--- a/src/middlewares/Authentication.ts
+++ b/src/middlewares/Authentication.ts
@@ -3,11 +3,12 @@ import { HTTPError } from "lambert-server";
 import { checkToken, Config } from "@fosscord/server-util";
 
 export const NO_AUTHORIZATION_ROUTES = [
-	"/api/v8/auth/login",
-	"/api/v8/auth/register",
-	"/api/v8/webhooks/",
-	"/api/v8/gateway",
-	"/api/v8/experiments"
+	/^\/api(\/v\d+)?\/auth\/login/,
+	/^\/api(\/v\d+)?\/auth\/register/,
+	/^\/api(\/v\d+)?\/webhooks\//,
+	/^\/api(\/v\d+)?\/gateway/,
+	/^\/api(\/v\d+)?\/experiments/,
+	/^\/api(\/v\d+)?\/guilds\/\d+\/widget\.(json|png)/
 ];
 
 declare global {
@@ -22,7 +23,7 @@ declare global {
 export async function Authentication(req: Request, res: Response, next: NextFunction) {
 	if (!req.url.startsWith("/api")) return next();
 	if (req.url.startsWith("/api/v8/invites") && req.method === "GET") return next();
-	if (NO_AUTHORIZATION_ROUTES.some((x) => req.url.startsWith(x))) return next();
+	if (NO_AUTHORIZATION_ROUTES.some((x) => x.test(req.url))) return next();
 	if (!req.headers.authorization) return next(new HTTPError("Missing Authorization Header", 401));
 
 	try {