Disable authentication for API

2025-09-15 17:15:49 +02:00
parent 91e6425c1e
commit 82f0fab1f5
2 changed files with 5 additions and 1 deletions
--- a/app/controllers/api/v1/orders_controller.rb
+++ b/app/controllers/api/v1/orders_controller.rb
@@ -4,7 +4,9 @@
 module Api
  module V1
    class OrdersController < ApiController
-      before_action :authenticate_user!
+      # Skip API key authentication for store_cart action (used by frontend forms)
+      skip_before_action :authenticate_api_key, only: [ :store_cart ]
+
      before_action :set_order, only: [ :show, :checkout, :retry_payment, :increment_payment_attempt ]
      before_action :set_event, only: [ :new, :create ]