fixes error that is interpreting every h request as api request

tosdr · Jun 5, 2023 · e4563ac · e4563ac
1 parent 6a0d3ba
commit e4563ac
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/h/security/policy/combined.py b/h/security/policy/combined.py
@@ -88,7 +88,7 @@ def _call_sub_policies(self, method, request, *args, **kwargs):
 
     @staticmethod
     def _is_api_request(request):
-        return (request.path.startswith("/api") or request.path.startswith("/hypothesis")) and request.path not in [
+        return (request.path.startswith("/api") or request.path.startswith("/hypothesis/api")) and request.path not in [
             "/api/token",
             "/api/badge",
             "/hypothesis/api/token",