From 0f9a7aba5c2b3d0815f559751baa7d982ecf375b Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Fri, 20 Mar 2026 09:56:24 +0100
Subject: [PATCH] Make debug endpoint anonymous for troubleshooting

---
 backend/WorkClub.Api/Program.cs | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/backend/WorkClub.Api/Program.cs b/backend/WorkClub.Api/Program.cs
index 08f1f55..2e5b029 100644
--- a/backend/WorkClub.Api/Program.cs
+++ b/backend/WorkClub.Api/Program.cs
@@ -175,12 +175,7 @@ app.MapGet("/api/debug/claims", (HttpContext context) =>
         hasAuthHeader = !string.IsNullOrEmpty(authHeader),
         authHeaderPrefix = authHeader?.Substring(0, Math.Min(20, authHeader?.Length ?? 0))
     });
-}).RequireAuthorization()
-  .AddEndpointFilter(async (context, next) =>
-  {
-      // Skip tenant validation for debug endpoint
-      return await next(context);
-  });
+});
 
 app.MapTaskEndpoints();
 app.MapShiftEndpoints();