Skip to content

fix: allow automation API key on content endpoint#265

Open
jaylong255 wants to merge 1 commit into
mainfrom
fix/admin-content-api-auth
Open

fix: allow automation API key on content endpoint#265
jaylong255 wants to merge 1 commit into
mainfrom
fix/admin-content-api-auth

Conversation

@jaylong255

Copy link
Copy Markdown
Member

Summary

  • /api/admin/content only accepted Supabase cookie auth, blocking GusClaw from calling it with X-API-Key
  • Now checks automation API key first (same pattern as /api/automation/social and /api/automation/traffic)
  • Falls through to cookie auth for browser-based admin UI users

Test plan

  • curl -H "X-API-Key: $KEY" https://cyberworldbuilders.com/api/admin/content returns 200
  • Admin dashboard still works in browser (cookie auth path)

🤖 Generated with Claude Code

The content endpoint only accepted Supabase cookie auth (browser sessions),
which meant GusClaw couldn't call it with X-API-Key. Now checks for
automation API key first, falls through to cookie auth for admin UI users.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@vercel

vercel Bot commented Apr 7, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
legend Ready Ready Preview, Comment Apr 7, 2026 0:11am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant