From 020841117f049144154ceaa7303338779bd84d0d Mon Sep 17 00:00:00 2001 From: Bernd Bestel Date: Sun, 30 Aug 2026 11:11:37 +0200 Subject: [PATCH] Make API route detection independent of real URL path (fixes #2977) --- changelog/83_UNRELEASED_xxxx-xx-xx.md | 2 +- middleware/Auth/BaseAuthMiddleware.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/changelog/83_UNRELEASED_xxxx-xx-xx.md b/changelog/83_UNRELEASED_xxxx-xx-xx.md index 3edda32b..2fa92cc0 100644 --- a/changelog/83_UNRELEASED_xxxx-xx-xx.md +++ b/changelog/83_UNRELEASED_xxxx-xx-xx.md @@ -54,4 +54,4 @@ ### API -- xxx +- Fixed that API Key Authentication did not work when running Grocy in a subdirectory diff --git a/middleware/Auth/BaseAuthMiddleware.php b/middleware/Auth/BaseAuthMiddleware.php index 7e14b034..0d0c48b8 100644 --- a/middleware/Auth/BaseAuthMiddleware.php +++ b/middleware/Auth/BaseAuthMiddleware.php @@ -122,7 +122,7 @@ abstract class BaseAuthMiddleware extends BaseMiddleware protected function IsApiRoute(Request $request): bool { - return string_starts_with($request->getUri()->getPath(), '/api/'); + return string_starts_with(RouteContext::fromRequest($request)->getRoute()->getPattern(), '/api/'); } /**