Exempt AP paths from auth state check
/.well-known/, /users/, /nodeinfo/ now skip the prompt=none OAuth redirect so ActivityPub endpoints work for unauthenticated remote servers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -159,7 +159,7 @@ def create_base_app(
|
|||||||
async def _check_auth_state():
|
async def _check_auth_state():
|
||||||
from quart import session as qs
|
from quart import session as qs
|
||||||
from urllib.parse import quote as _quote
|
from urllib.parse import quote as _quote
|
||||||
if request.path.startswith("/auth/") or request.path.startswith("/static/"):
|
if request.path.startswith(("/auth/", "/static/", "/.well-known/", "/users/", "/nodeinfo/")):
|
||||||
return
|
return
|
||||||
|
|
||||||
uid = qs.get("uid")
|
uid = qs.get("uid")
|
||||||
|
|||||||
Reference in New Issue
Block a user