From a1c861202a3c390e0b7da935e1820faeb8ffef29 Mon Sep 17 00:00:00 2001
From: Z User <z@container>
Date: Thu, 29 Oct 2026 00:47:20 +0000
Subject: [PATCH] fix: make /api/auth/login public (middleware was blocking
 login itself)

---
 src/middleware.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/middleware.ts b/src/middleware.ts
index e9814ee..ba34fe2 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -10,6 +10,7 @@ const PUBLIC_PATHS = [
   '/api/aos/licenses/check',
   '/api/aos/licenses/validate',
   '/api/aos/stripe/webhook',
+  '/api/auth/login',
   '/login',
   '/_next',
   '/favicon.ico',
@@ -24,6 +25,7 @@ const PUBLIC_API_PREFIXES = [
   '/api/aos/licenses/check',
   '/api/aos/licenses/validate',
   '/api/aos/stripe/webhook',
+  '/api/auth/login',
   '/api/v1/',  // public REST API (token-auth'd separately)
   '/api/mcp',  // MCP (token-auth'd)
 ]