@@ -24,6 +24,12 @@ export default auth((req) => {
|
|||||||
// Allow external/scripting API routes (authenticated via API key header)
|
// Allow external/scripting API routes (authenticated via API key header)
|
||||||
if (pathname.startsWith("/api/ext/")) return;
|
if (pathname.startsWith("/api/ext/")) return;
|
||||||
|
|
||||||
|
// Allow display device routes (ESP32 dot-matrix, authenticated via API key header)
|
||||||
|
if (pathname.startsWith("/api/display/")) return;
|
||||||
|
|
||||||
|
// Allow dashboard stats via display key (ESP32 polls this)
|
||||||
|
if (pathname === "/api/dashboard/stats") return;
|
||||||
|
|
||||||
// Allow local file serving (needed for video playback in client portal)
|
// Allow local file serving (needed for video playback in client portal)
|
||||||
if (pathname.startsWith("/api/files/")) return;
|
if (pathname.startsWith("/api/files/")) return;
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user