From 8dade4e93e51226c0210d3c68624139c64be7f25 Mon Sep 17 00:00:00 2001
From: VihangaMunasinghe <vihangamunasinghe.official@gmail.com>
Date: Thu, 7 May 2026 16:57:40 +0530
Subject: [PATCH] add push device update endpoints to allowed endpoints

---
 .../resources/resource-access-control-v2.xml.j2               | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2 b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
index 04cad9673c75..8da265d0ba62 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="ISO-8859-1"?>
 <!--
-  ~ Copyright (c) 2023-2025, WSO2 LLC. (http://www.wso2.com).
+  ~ Copyright (c) 2023-2026, WSO2 LLC. (http://www.wso2.com).
   ~
   ~ WSO2 LLC. licenses this file to you under the Apache License,
   ~ Version 2.0 (the "License"); you may not use this file except
@@ -977,9 +977,11 @@
         <!-- [Organization] Push Device Management API -->
         <Resource context="(.*)/o/api/users/v1/me/push/devices" secured="false" http-method="POST"/>
         <Resource context="(.*)/o/api/users/v1/me/push/devices/(.*)/remove" secured="false" http-method="POST"/>
+        <Resource context="(.*)/o/api/users/v1/me/push/devices/(.*)/update" secured="false" http-method="POST"/>
         <!-- Push Device Management API -->
         <Resource context="(.*)/api/users/v1/me/push/devices" secured="false" http-method="POST"/>
         <Resource context="(.*)/api/users/v1/me/push/devices/(.*)/remove" secured="false" http-method="POST"/>
+        <Resource context="(.*)/api/users/v1/me/push/devices/(.*)/update" secured="false" http-method="POST"/>
 
         <Resource context="(.*)/api/users/v1/me(.*)" secured="true" http-method="GET, HEAD, POST, PUT, DELETE, PATCH">
             <Scopes>internal_login</Scopes>