From f1019ef47772cecb29701332b64005a0f2031a24 Mon Sep 17 00:00:00 2001
From: winter Sparkles
Date: Sun, 9 Aug 2026 16:39:47 +0100
Subject: support non-redirecting domains for auth-request

---
 routes/integration/auth-request.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'routes/integration')

diff --git a/routes/integration/auth-request.php b/routes/integration/auth-request.php
index 21c5d11..ba04988 100644
--- a/routes/integration/auth-request.php
+++ b/routes/integration/auth-request.php
@@ -23,6 +23,16 @@ function GET(array $config) {
         return;
     }
 
+    if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) {
+        $host = parse_url($_SERVER['HTTP_X_ORIGINAL_URI'], PHP_URL_HOST);
+        if (in_array(
+            $host, $config['integration']['no-redirect-domains'] ?? []
+        )) {
+            // ok, don't redirect to login page
+            return;
+        }
+    }
+
     http_response_code(401);
     $login = 'https://' . $config['site']['primary-domain'] . '/login';
     if (isset($_SERVER['HTTP_X_ORIGINAL_URI'])) {
-- 
cgit v1.3