From 8d15b7e1567f15ac847c9542f4d3d59a1bc5090c Mon Sep 17 00:00:00 2001
From: Drew DeVault <sir@cmpwn.com>
Date: Fri, 18 Jun 2021 12:18:20 -0400
Subject: [PATCH] auth: authenticate all requests under /query

---
 auth/middleware.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth/middleware.go b/auth/middleware.go
index aa59ce21317f0a176a486b5d77a960a78cbf7329..99b8c5e168230c71a58ed690cfa2534ea0c6626e 100644
--- a/auth/middleware.go
+++ b/auth/middleware.go
@@ -686,7 +686,7 @@ func Middleware(conf ini.File, apiconf string) func(http.Handler) http.Handler {
 
 	return func(next http.Handler) http.Handler {
 		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			if r.URL.Path != "/query" {
+			if !strings.HasPrefix(r.URL.Path, "/query") {
 				next.ServeHTTP(w, r)
 				return
 			}