From 9cc6fd13fa05eb9eacc0901087e3561100a87496 Mon Sep 17 00:00:00 2001
From: dumbmoron <log@riseup.net>
Date: Fri, 4 Oct 2024 17:37:57 +0000
Subject: [PATCH] api/core: skip turnstile verification if user authed with api
 key

---
 api/src/core/api.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/src/core/api.js b/api/src/core/api.js
index 4ee64508..b11d689a 100644
--- a/api/src/core/api.js
+++ b/api/src/core/api.js
@@ -148,7 +148,7 @@ export const runAPI = (express, app, __dirname) => {
     });
 
     app.post('/', (req, res, next) => {
-        if (!env.sessionEnabled) {
+        if (!env.sessionEnabled || req.rateLimitKey) {
             return next();
         }