fix: whitelist /p/* in middleware so short links work without a session

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-07 10:42:09 +02:00
parent 76aad8b1d1
commit d291af0e33
1 changed files with 1 additions and 0 deletions
@@ -8,6 +8,7 @@ const PUBLIC_PATHS = [
  '/api/health',
  '/api/admin-auth',          // admin login API
  '/pitch-admin/login',       // admin login page
+  '/p',                       // short link redirects — must be public so uninvited users can follow magic links
  '/_next',
  '/manifest.json',
  '/sw.js',