From a1ca1fe578ca5b2453b11698609eb1fdef9d40b0 Mon Sep 17 00:00:00 2001 From: Vlad Stan Date: Wed, 1 Jul 2026 14:57:31 +0300 Subject: [PATCH] Revert "feat: public page http calls" This reverts commit e7c359c1e0e21a8aeea391fd5b2cd6316526d42c. --- lnbits/core/extensions/api.py | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/lnbits/core/extensions/api.py b/lnbits/core/extensions/api.py index cc6269dfa..a3f4b397c 100644 --- a/lnbits/core/extensions/api.py +++ b/lnbits/core/extensions/api.py @@ -407,19 +407,12 @@ class ExtensionAPI: sdk_name="request", description="Make an outbound HTTP request to an allowed host.", required_permission="http.request", - require_auth=False, + require_auth=True, ) async def http_request(self, request: HttpRequest) -> HttpResponse: from .http_client import send_extension_http_request policy = self.permission_policies.get("http.request") or {} - if ( - not self.has_authenticated_context() - and policy.get("allow_public") is not True - ): - raise PermissionError( - "Extension API method 'http.request' requires authentication." - ) return await send_extension_http_request(self.extension_id, policy, request) @extension_api_method(