From 471bda2c40c16562287952ade58a3865d2efa076 Mon Sep 17 00:00:00 2001
From: dtzp555 <dtzp555@gmail.com>
Date: Fri, 10 Apr 2026 21:21:36 +1000
Subject: [PATCH] fix: make /dashboard a public endpoint (no auth required)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 server.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.mjs b/server.mjs
index ca19095..415723a 100644
--- a/server.mjs
+++ b/server.mjs
@@ -1039,7 +1039,7 @@ const server = createServer(async (req, res) => {
   if (req.method === "OPTIONS") { res.writeHead(204); res.end(); return; }
 
   // 3-mode auth: none | shared | multi
-  const isPublicEndpoint = req.url === "/health";
+  const isPublicEndpoint = req.url === "/health" || req.url === "/dashboard";
   let authKeyName = "local";
   let authKeyId = null;