security: allow only authenticated internal access to canonical ER bridge

2026-09-07 17:19:26 +02:00
parent 71f2d13ae1
commit 3d0c211af8
1 changed files with 1 additions and 0 deletions
@@ -26,6 +26,7 @@ const EXEMPT_PATTERNS: RegExp[] = [
 const INTERNAL_ONLY_ROUTES: RegExp[] = [
  /^\/api\/0pt\/quality\/bridge-run$/,
  /^\/api\/0pt\/internal\/evidence-outbox\/dispatch$/,
+  /^\/api\/0pt\/internal\/er\/candidates$/,
 ];

 let _authDiagCount = 0;