fix: exclude DELETE requests from email authorized checks

supabase · Sep 27, 2024 · 57356f7 · 57356f7
1 parent 42cae61
commit 57356f7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/api/middleware.go b/internal/api/middleware.go
@@ -177,7 +177,7 @@ func (a *API) isValidAuthorizedEmail(w http.ResponseWriter, req *http.Request) (
 	ctx := req.Context()
 
 	// skip checking for authorized email addresses if it's an admin request
-	if strings.HasPrefix(req.URL.Path, "/admin") || req.Method == http.MethodGet {
+	if strings.HasPrefix(req.URL.Path, "/admin") || req.Method == http.MethodGet || req.Method == http.MethodDelete {
 		return ctx, nil
 	}