API endpoints responding with login page

[jakejoh]

when calling API endpoints, the serer reponds with the login page.
Calling the endpoint in a browser (logged in) works as expected, however :)
I suspect the commit bbecd7d to be the reason.

the log:

{
  "time": "2024-11-27T09:21:36.536800314Z",
  "level": "INFO",
  "msg": "Incoming request",
  "app": "workout-tracker",
  "version": "master",
  "sha": "7c61a8bd9d3d806143dc8da0d84eaa38aa1f5ac7",
  "module": "webserver",
  "request": {
    "host": "myhost.tdl",
    "ip": "2a01:239:2f9:6f00::1",
    "length": 0,
    "method": "GET",
    "params": {},
    "path": "/api/v1/whoami",
    "query": "apikey=REDACTED",
    "referer": "",
    "route": "/api/v1/whoami",
    "time": "2024-11-27T09:21:36.536635123Z"
  },
  "response": {
    "latency": 148256,
    "length": 0,
    "status": 302,
    "time": "2024-11-27T09:21:36.536783379Z"
  }
}

plus a WARN log entry

{
  "time": "2024-11-27T09:21:36.536695782Z",
  "level": "WARN",
  "msg": "error validating user",
  "app": "workout-tracker",
  "version": "master",
  "sha": "7c61a8bd9d3d806143dc8da0d84eaa38aa1f5ac7",
  "module": "app",
  "error": "invalid JWT token"
}