From dddd1a9c4002d3e3626105ffaf8a6c75a2f2dd7d Mon Sep 17 00:00:00 2001
From: janis steiner <janis@jakach.ch>
Date: Thu, 7 May 2026 20:11:34 +0200
Subject: [PATCH] fixing 401 errors

---
 backend/api/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/api/index.php b/backend/api/index.php
index d4d0386..38c46dd 100644
--- a/backend/api/index.php
+++ b/backend/api/index.php
@@ -20,7 +20,7 @@ $path = str_replace('/api/', '', $path);
 $segments = explode('/', trim($path, '/'));
 $resource = $segments[0] ?? '';
 
-if ($resource !== 'session') {
+if ($resource !== 'session' && $resource !== 'login' && $resource !== 'logout') {
     $loggedin = isset($_SESSION['neptune_loggedin']) && $_SESSION['neptune_loggedin'] === true;
     if (!$loggedin) {
         http_response_code(401);