From 2ff6fe5d3acd8faea3b9d38685dc27c55fc0e9f0 Mon Sep 17 00:00:00 2001 From: Vlad Stan Date: Wed, 1 Jul 2026 13:43:33 +0300 Subject: [PATCH] feat: public page http calls --- lnbits/core/extensions/api.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/lnbits/core/extensions/api.py b/lnbits/core/extensions/api.py index a3f4b397c..cc6269dfa 100644 --- a/lnbits/core/extensions/api.py +++ b/lnbits/core/extensions/api.py @@ -407,12 +407,19 @@ class ExtensionAPI: sdk_name="request", description="Make an outbound HTTP request to an allowed host.", required_permission="http.request", - require_auth=True, + require_auth=False, ) async def http_request(self, request: HttpRequest) -> HttpResponse: from .http_client import send_extension_http_request policy = self.permission_policies.get("http.request") or {} + if ( + not self.has_authenticated_context() + and policy.get("allow_public") is not True + ): + raise PermissionError( + "Extension API method 'http.request' requires authentication." + ) return await send_extension_http_request(self.extension_id, policy, request) @extension_api_method(