From 3078af8f2aa3bcf3fd0a5db40195516ea8684fc2 Mon Sep 17 00:00:00 2001
From: Kalista Payne <kalista@habitica.com>
Date: Fri, 8 Aug 2025 13:36:19 -0500
Subject: [PATCH] fix(apple): don't run auth middleware during redirect

---
 website/server/controllers/api-v3/auth.js | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/website/server/controllers/api-v3/auth.js b/website/server/controllers/api-v3/auth.js
index 22530d0a55..d8359beaba 100644
--- a/website/server/controllers/api-v3/auth.js
+++ b/website/server/controllers/api-v3/auth.js
@@ -151,9 +151,7 @@ api.loginSocial = {
 // Called by apple for web authentication.
 api.redirectApple = {
   method: 'POST',
-  middlewares: [authWithHeaders({
-    optional: true,
-  })],
+  middlewares: [],
   url: '/user/auth/apple',
   async handler (req, res) {
     if (req.body.id_token) {