From bd913bb46d107e04ed543e40b8a632f0729e96de Mon Sep 17 00:00:00 2001
From: John Mizerek <mizerek@gmail.com>
Date: Sat, 14 Mar 2026 15:11:04 -0700
Subject: [PATCH] Fix PUBLIC_ROUTES case-sensitivity bug in runAuth (strtolower
 path vs mixed-case routes)

---
 api/helpers.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/helpers.php b/api/helpers.php
index 0c210cc..6fd6daa 100644
--- a/api/helpers.php
+++ b/api/helpers.php
@@ -463,7 +463,7 @@ function runAuth(): void {
     // Check if public route
     $isPublic = false;
     foreach (PUBLIC_ROUTES as $route) {
-        if (str_contains($path, $route)) {
+        if (str_contains($path, strtolower($route))) {
             $isPublic = true;
             break;
         }