fix: made events calendar public without auth key

Vatsim-Scandinavia · Sep 8, 2024 · cec696c · cec696c
1 parent 34580cd
commit cec696c
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/app/Http/Middleware/ApiToken.php b/app/Http/Middleware/ApiToken.php
@@ -20,9 +20,15 @@ public function handle(Request $request, Closure $next, $args = ''): Response
 
         if($key === null || ($args == 'edit' && $key->readonly == true))
         {
-            return response()->json([
-                'message' => 'Unauthorized',
-            ], 401);
+            // Exception for open calendar fetch
+            if (preg_match('/^\/api\/calendars\/\d+\/events$/', $request->getRequestUri())) {
+                $request->attributes->set('unauthenticated', true);
+                return $next($request);
+            } else {
+                return response()->json([
+                    'message' => 'Unauthorized',
+                ], 401);
+            }
         }
 
         $key->update(['last_used_at', now()]);