From 2792f78adab340d81bdafb3a59d04b50af684f73 Mon Sep 17 00:00:00 2001 From: nav Date: Fri, 15 May 2026 00:32:33 +0000 Subject: [PATCH] fix(center): exempt guild join/members auth endpoints from api-key guard --- src/common/center-api-key.guard.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/common/center-api-key.guard.ts b/src/common/center-api-key.guard.ts index 9f756db..f2d4832 100644 --- a/src/common/center-api-key.guard.ts +++ b/src/common/center-api-key.guard.ts @@ -27,7 +27,9 @@ export class CenterApiKeyGuard implements CanActivate { (method === 'POST' && (path === '/auth/login' || path.endsWith('/auth/login'))) || (method === 'POST' && (path === '/auth/refresh' || path.endsWith('/auth/refresh'))) || (method === 'POST' && (path === '/auth/logout' || path.endsWith('/auth/logout'))) || - (method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds'))); + (method === 'GET' && (path === '/auth/me/guilds' || path.endsWith('/auth/me/guilds'))) || + (method === 'POST' && (path === '/auth/me/guilds/join' || path.endsWith('/auth/me/guilds/join'))) || + (method === 'GET' && (path.includes('/auth/guilds/') && path.endsWith('/members'))); if (noApiKeyRequired) { return true;