jeffemmett
/
rspace-online
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(rdesign): add design-agent API to public endpoint exemptions 

The demo space auth middleware was blocking POST requests with 403.
Add /rdesign/api/ to isPublicEndpoint list, matching rwallet pattern.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jeff Emmett 2026-03-24 10:32:18 -07:00
parent ddb5b0b2e4
commit f70972cfb7
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
server/index.ts
View File

@ -2321,7 +2321,8 @@ for (const mod of getAllModules()) {
|| pathname.endsWith("/api/ramp/webhook") || pathname.endsWith("/api/ramp/webhook")
|| pathname.includes("/rcart/api/payments") || pathname.includes("/rcart/api/payments")
|| pathname.includes("/rcart/pay/") || pathname.includes("/rcart/pay/")
|| pathname.includes("/rwallet/api/"); || pathname.includes("/rwallet/api/")
|| pathname.includes("/rdesign/api/");
if (!isHtmlRequest && !isPublicEndpoint && (vis === "private" || vis === "permissioned")) { if (!isHtmlRequest && !isPublicEndpoint && (vis === "private" || vis === "permissioned")) {
const token = extractToken(c.req.raw.headers); const token = extractToken(c.req.raw.headers);