simplifying the auth and creating strict separation

2025-12-17 07:24:34 +01:00 · 2025-09-09 06:38:37 +02:00
parent bd7109e31b
commit 1b36a94034
16 changed files with 335 additions and 287 deletions
--- a/backend/app/middleware/security.py
+++ b/backend/app/middleware/security.py
@@ -104,8 +104,10 @@ class SecurityMiddleware(BaseHTTPMiddleware):
            "/favicon.ico",
            "/api/v1/auth/register",
            "/api/v1/auth/login",
+            "/api/v1/auth/refresh",  # Allow refresh endpoint
            "/api-internal/v1/auth/register",
            "/api-internal/v1/auth/login",
+            "/api-internal/v1/auth/refresh",  # Allow refresh endpoint for internal API
            "/",  # Root endpoint
        ]