summary refs log tree commit diff
path: root/src/api/middlewares
diff options
context:
space:
mode:
authorRory& <root@rory.gay>2026-06-16 17:59:23 +0200
committerRory& <root@rory.gay>2026-06-16 17:59:23 +0200
commit9bb2c437cfc61d117373973045a03de66f8e5e49 (patch)
tree03474a2fb9c460955c5e984e4b0bc13c32094387 /src/api/middlewares
parentFix random string code (diff)
downloadserver-ts-9bb2c437cfc61d117373973045a03de66f8e5e49.tar.xz
Authentication: allow - in webhook token
Diffstat (limited to 'src/api/middlewares')
-rw-r--r--src/api/middlewares/Authentication.ts2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/api/middlewares/Authentication.ts b/src/api/middlewares/Authentication.ts

index 9b14a4ae..a71dfdf1 100644 --- a/src/api/middlewares/Authentication.ts +++ b/src/api/middlewares/Authentication.ts
@@ -34,7 +34,7 @@ export const NO_AUTHORIZATION_ROUTES = [ "POST /auth/fingerprint", "GET /invites/", // Routes with a seperate auth system - /^(POST|HEAD|GET|PATCH|DELETE) \/webhooks\/\d+\/\w+\/?/, // no token requires auth + /^(POST|HEAD|GET|PATCH|DELETE) \/webhooks\/\d+\/[\w-]+\/?/, // no token requires auth /^POST \/interactions\/\d+\/[A-Za-z0-9_-]+\/callback/, // Public information endpoints "GET /ping",