From af91f3d5fc04085d46a6c606335c7bfc30f02298 Mon Sep 17 00:00:00 2001
From: Randall Stillwell <me@randallstillwell.com>
Date: Thu, 16 Apr 2026 17:22:29 -0500
Subject: [PATCH] Allow unauthenticated access to invite and verification
 routes

Add /invite and /api/invitations/verify to public paths so invited
users can access the invite page and complete registration without
being redirected to login.

Made-with: Cursor
---
 src/middleware.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/middleware.ts b/src/middleware.ts
index 3966e13..776fca9 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -4,11 +4,13 @@ import { getToken } from "next-auth/jwt";
 const publicPaths = [
   "/login",
   "/signup",
+  "/invite",
   "/setup",
   "/api/auth",
   "/api/health",
   "/api/setup",
   "/api/onboarding",
+  "/api/invitations/verify",
   "/api/jobs/process",
   "/api/email-watch/poll",
   "/api/ftp-watch/poll",