From 16112af26d6b3edbefe97baa87916ee2db421faa Mon Sep 17 00:00:00 2001
From: Michael Reber <michael.reber@swissmakers.ch>
Date: Sat, 21 Feb 2026 18:41:42 +0100
Subject: [PATCH] Removed webSocket form public routes. Needs now as well a
 authentication, if enabled

---
 pkg/web/auth.go | 1 -
 1 file changed, 1 deletion(-)

diff --git a/pkg/web/auth.go b/pkg/web/auth.go
index fd42239..c271d30 100644
--- a/pkg/web/auth.go
+++ b/pkg/web/auth.go
@@ -67,7 +67,6 @@ func isPublicRoute(path string) bool {
 		"/auth/status",
 		"/api/ban",
 		"/api/unban",
-		"/api/ws",
 		"/static/",
 		"/locales/",
 	}