From 237225f10bc958182e89bdb34b09ea8d753dedb6 Mon Sep 17 00:00:00 2001
From: Christian Beutel <>
Date: Sun, 5 Oct 2025 12:46:02 +0200
Subject: [PATCH] block external profiles for unregistered users

---
 web/src/routes/api/v1/profile/[handle]/+server.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/routes/api/v1/profile/[handle]/+server.ts b/web/src/routes/api/v1/profile/[handle]/+server.ts
index a9772f26..d75bbe3c 100644
--- a/web/src/routes/api/v1/profile/[handle]/+server.ts
+++ b/web/src/routes/api/v1/profile/[handle]/+server.ts
@@ -10,7 +10,7 @@ export async function GET(event: RequestEvent) {
         return error(400, { message: "Bad request" })
     }
 
-    if(splitUsername(handle)[1] !== env.ORIGIN && !event.locals.user) {
+    if(splitUsername(handle)[1] !== undefined && !event.locals.user) {
         return error(401, { message: "Unauthorized" })
     }