From f5f9d464cb8ee9f5f3fcff7285256d30d8b492be Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 22 Dec 2025 14:45:14 +0000
Subject: [PATCH] Fix whitelist check to use base-URL-aware paths

Co-authored-by: whyour <22700758+whyour@users.noreply.github.com>
---
 back/loaders/express.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/back/loaders/express.ts b/back/loaders/express.ts
index 1bf25cfd..cf2b8546 100644
--- a/back/loaders/express.ts
+++ b/back/loaders/express.ts
@@ -83,7 +83,7 @@ export default ({ app }: { app: Application }) => {
     if (
       !headerToken &&
       originPath &&
-      config.apiWhiteList.includes(originPath)
+      jwtWhitelist.includes(originPath)
     ) {
       return next();
     }