Correction on restricted path checking (auth-host).

2025-10-04 16:59:05 -06:00
parent a60c1bd5f5
commit 2a81544701
1 changed files with 1 additions and 3 deletions
--- a/passkey/fastapi/auth_host.py
+++ b/passkey/fastapi/auth_host.py
@@ -25,9 +25,7 @@ def is_ui_path(path: str) -> bool:

 def is_restricted_path(path: str) -> bool:
    """Check if the path is restricted (API/admin endpoints)."""
-    return path.startswith(
-        ("/auth/api/admin", "/auth/api/user", "/auth/api/ws", "/auth/ws/")
-    )
+    return path.startswith(("/auth/api/admin/", "/auth/api/user/", "/auth/ws/"))


 def should_redirect_to_auth_host(path: str) -> bool: