From f297f2630b63ad2e935e3cd96e3908b81e3e53d7 Mon Sep 17 00:00:00 2001
From: Jannat Patel <pateljannat2308@gmail.com>
Date: Mon, 19 Jan 2026 19:03:51 +0530
Subject: [PATCH] fix: only block endpoints if enabled in site config

---
 lms/auth.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lms/auth.py b/lms/auth.py
index 6cc652c6..f745a080 100644
--- a/lms/auth.py
+++ b/lms/auth.py
@@ -46,6 +46,9 @@ ALLOWED_PATHS = [
 
 
 def authenticate():
+	if not frappe.conf.get("block_endpoints"):
+		return
+
 	if frappe.form_dict.cmd:
 		path = f"/api/method/{frappe.form_dict.cmd}"
 	else: