Require auth middleware only on GET requests

controllers/auth/indieauth/server.go

@@ -6,13 +6,16 @@ import (
 
 	ia "github.com/owncast/owncast/auth/indieauth"
 	"github.com/owncast/owncast/controllers"
+	"github.com/owncast/owncast/router/middleware"
 )
 
 // HandleAuthEndpoint will handle the IndieAuth auth endpoint.
 func HandleAuthEndpoint(w http.ResponseWriter, r *http.Request) {
 	if r.Method == http.MethodGet {
 		// Require the GET request for IndieAuth to be behind admin login.
-		handleAuthEndpointGet(w, r)
+		f := middleware.RequireAdminAuth(handleAuthEndpointGet)
+		f(w, r)
+		return
 	} else if r.Method == http.MethodPost {
 		handleAuthEndpointPost(w, r)
 	} else {

router/router.go

@@ -356,7 +356,7 @@ func Start() error {
 	// Start auth flow
 	http.HandleFunc("/api/auth/indieauth", middleware.RequireUserAccessToken(indieauth.StartAuthFlow))
 	http.HandleFunc("/api/auth/indieauth/callback", indieauth.HandleRedirect)
-	http.HandleFunc("/api/auth/provider/indieauth", middleware.RequireAdminAuth(indieauth.HandleAuthEndpoint))
+	http.HandleFunc("/api/auth/provider/indieauth", indieauth.HandleAuthEndpoint)
 
 	http.HandleFunc("/api/auth/fediverse", middleware.RequireUserAccessToken(fediverseauth.RegisterFediverseOTPRequest))
 	http.HandleFunc("/api/auth/fediverse/verify", fediverseauth.VerifyFediverseOTPRequest)