fix(mana-core-auth): exclude /api/auth/get-session from global prefix

The get-session endpoint needs to be accessible at /api/auth/get-session
(without the /api/v1 prefix) for SSO to work.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Till-JS 2026-02-02 16:29:17 +01:00
parent 95e9b3764d
commit d64016d1e5

View file

@ -109,7 +109,8 @@ async function bootstrap() {
{ path: 'health', method: RequestMethod.ALL },
// OIDC login page
{ path: 'login', method: RequestMethod.ALL },
// Better Auth routes (verification emails, password reset, sign-in)
// Better Auth routes (verification emails, password reset, sign-in, SSO)
{ path: 'api/auth/get-session', method: RequestMethod.ALL },
{ path: 'api/auth/verify-email', method: RequestMethod.ALL },
{ path: 'api/auth/reset-password/(.*)', method: RequestMethod.ALL },
{ path: 'api/auth/sign-in/(.*)', method: RequestMethod.ALL },