MasterMito/work-club-manager
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: exempt /api/clubs/me from tenant validation

Browse Source 
- Add path exemption in TenantValidationMiddleware for /api/clubs/me
- Change authorization policy from RequireMember to RequireViewer
- Fix KEYCLOAK_CLIENT_ID in docker-compose.yml (workclub-app not workclub-api)
- Endpoint now works without X-Tenant-Id header as intended
- Other endpoints still protected by tenant validation

This fixes the chicken-and-egg problem where frontend needs to call
/api/clubs/me to discover available clubs before selecting a tenant.
This commit is contained in:
WorkClub Automation
2026-03-05 21:32:37 +01:00
parent 18be0fb183
commit ffc4062eba
45 changed files with 5519 additions and 579 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.sisyphus/evidence/final-qa/s32-duplicate-signup.json Normal file
View File

@@ -0,0 +1,2 @@
"Already signed up for this shift"
HTTP_CODE:409