From 619ae393bd68c6dde4a98a020f36b1b5ae7edddd Mon Sep 17 00:00:00 2001 From: dmitriylaukhin Date: Fri, 12 Jun 2026 13:26:19 +0500 Subject: [PATCH] Allow /api/register through auth middleware MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Turnstile/honeypot wrapper /api/register was missing from PUBLIC_ROUTES, so unauthenticated POSTs were redirected to /login (307). The register form followed the redirect, got HTML, and failed to parse it — surfacing as "connection error". This silently broke signups for new users. Add /api/register alongside /api/auth. Co-Authored-By: Claude Opus 4.8 --- src/middleware.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/middleware.ts b/src/middleware.ts index 8b142a9..d172ab7 100644 --- a/src/middleware.ts +++ b/src/middleware.ts @@ -1,7 +1,7 @@ import { NextRequest, NextResponse } from "next/server"; import { getSessionCookie } from "better-auth/cookies"; -const PUBLIC_ROUTES = ["/login", "/register", "/verify-email", "/forgot-password", "/reset-password", "/api/auth", "/maintenance"]; +const PUBLIC_ROUTES = ["/login", "/register", "/verify-email", "/forgot-password", "/reset-password", "/api/auth", "/api/register", "/maintenance"]; export function middleware(request: NextRequest) { const { pathname } = request.nextUrl;