From e64583304271c7c2604f41df5ce89cbed42c2cb5 Mon Sep 17 00:00:00 2001
From: "Emma [it/its]@Rory&" <root@rory.gay>
Date: Sun, 6 Jul 2025 16:15:15 +0200
Subject: More admin API fun

---
 .../Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'extra/admin-api/Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs')

diff --git a/extra/admin-api/Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs b/extra/admin-api/Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs
index 2dc4c9774..1c8f9e939 100644
--- a/extra/admin-api/Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs
+++ b/extra/admin-api/Spacebar.AdminAPI/Middleware/AuthenticationMiddleware.cs
@@ -13,7 +13,8 @@ public class AuthenticationMiddleware(RequestDelegate next) {
     private static Dictionary<string, DateTime> _userCacheExpiry = new();
 
     public async Task InvokeAsync(HttpContext context, IServiceProvider sp) {
-        if (context.Request.Path.StartsWithSegments("/ping")) {
+        var config = sp.GetRequiredService<Configuration>();
+        if (context.Request.Path.StartsWithSegments("/ping") || config.DisableAuthentication) {
             await next(context);
             return;
         }
@@ -55,7 +56,6 @@ public class AuthenticationMiddleware(RequestDelegate next) {
 
         if (!_userCache.ContainsKey(token)) {
             var db = sp.GetRequiredService<SpacebarDbContext>();
-            var config = sp.GetRequiredService<Configuration>();
             user = await db.Users.FindAsync(config.OverrideUid ?? res.ClaimsIdentity.Claims.First(x => x.Type == "id").Value)
                    ?? throw new InvalidOperationException();
             _userCache[token] = user;
-- 
cgit 1.5.1