fixed auth check on urls with startsWith (#338)

thirdweb-dev · Dec 7, 2023 · afd03a3 · afd03a3
1 parent e8e57f8
commit afd03a3
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/src/server/middleware/auth.ts b/src/server/middleware/auth.ts
@@ -167,12 +167,12 @@ export const withAuth = async (server: FastifyInstance) => {
       req.url === "/health" ||
       req.url === "/static" ||
       req.url === "/json" ||
-      req.url === "/auth/payload" ||
-      req.url === "/auth/login" ||
-      req.url === "/auth/user" ||
-      req.url === "/auth/switch-account" ||
-      req.url === "/auth/logout" ||
-      req.url === "/transaction/status"
+      req.url.startsWith("/auth/payload") ||
+      req.url.startsWith("/auth/login") ||
+      req.url.startsWith("/auth/user") ||
+      req.url.startsWith("/auth/switch-account") ||
+      req.url.startsWith("/auth/logout") ||
+      req.url.startsWith("/transaction/status")
     ) {
       // We skip auth check for static endpoints and auth routes
       return;