@@ -14,6 +14,9 @@ export default auth((req) => {
|
||||
// Allow token-gated client API routes (comments, approvals via review token)
|
||||
if (pathname.startsWith("/api/client/")) return;
|
||||
|
||||
// Allow external/scripting API routes (authenticated via API key header)
|
||||
if (pathname.startsWith("/api/ext/")) return;
|
||||
|
||||
// Allow local file serving (needed for video playback in client portal)
|
||||
if (pathname.startsWith("/api/files/")) return;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user