From 32d625151e33c05e01c716befcabfc0613cc180b Mon Sep 17 00:00:00 2001
From: Celso Martinho <celso@cloudflare.com>
Date: Mon, 20 Feb 2023 12:22:24 +0000
Subject: [PATCH] keep /api/v1/statuses/[id]/reblog or
 /api/v1/statuses/[id]/favourite authentificated

---
 backend/src/middleware/main.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/src/middleware/main.ts b/backend/src/middleware/main.ts
index 6c65fb8..2f9a777 100644
--- a/backend/src/middleware/main.ts
+++ b/backend/src/middleware/main.ts
@@ -49,7 +49,7 @@ export async function main(context: EventContext<Env, any, any>) {
 	if (
 		url.pathname === '/oauth/token' ||
 		url.pathname === '/oauth/authorize' || // Cloudflare Access runs on /oauth/authorize
-		url.pathname === '/api/v1/statuses' || // Unless private https://docs.joinmastodon.org/methods/statuses/#get
+		/^\/api\/v1\/statuses\/.*(?<!(reblog|favourite))$/.test((url.pathname) || // Unless private https://docs.joinmastodon.org/methods/statuses/#get
 		url.pathname === '/api/v1/instance' ||
 		url.pathname === '/api/v2/instance' ||
 		url.pathname === '/api/v1/instance/peers' ||