From 19885c98e620f2d666b0e721b1fb09cfd2074aaf Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Fri, 3 Apr 2026 02:33:53 +0000 Subject: [PATCH] fix(rcart): make payment pages publicly accessible Payment request URLs (e.g. /rcart/pay/:id) should be accessible without authentication, even in private spaces. The API endpoints were already exempted from auth, but the client-side shell gate was redirecting unauthenticated visitors to the module landing page. Set spaceVisibility="public" on the payment page render to bypass this. Co-Authored-By: Claude Opus 4.6 (1M context) --- modules/rcart/mod.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/rcart/mod.ts b/modules/rcart/mod.ts index 99d8e81..9c359f2 100644 --- a/modules/rcart/mod.ts +++ b/modules/rcart/mod.ts @@ -2455,6 +2455,7 @@ routes.get("/pay/:id", (c) => { title: `Payment | rCart`, moduleId: "rcart", spaceSlug: space, + spaceVisibility: "public", // Payment pages are always public modules: getModuleInfoList(), theme: "dark", body: ``,