fix: only block endpoints if enabled in site config

2026-01-19 19:03:51 +05:30
parent 9425f2aa0e
commit f297f2630b
1 changed files with 3 additions and 0 deletions
--- a/lms/auth.py
+++ b/lms/auth.py
@@ -46,6 +46,9 @@ ALLOWED_PATHS = [


 def authenticate():
+	if not frappe.conf.get("block_endpoints"):
+		return
+
 	if frappe.form_dict.cmd:
 		path = f"/api/method/{frappe.form_dict.cmd}"
 	else: