From 747d9e181172c21719f00eaa8d782c2eb76e1357 Mon Sep 17 00:00:00 2001
From: neodk2004 <barac.daniel@gmail.com>
Date: Tue, 11 Aug 2026 15:29:28 +0200
Subject: [PATCH] fix(proxy): allow unauthenticated access to /opengraph-image
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Social-media crawlers (Facebook, Twitter/X, Slack, Discord) never
have a Clerk session, so the new OG image route was 307-redirecting
every one of them to /sign-in instead of serving the image — found
while live-testing right after deploy, same class of bug as the
GDPR-export route fix.
---
 src/proxy.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/proxy.ts b/src/proxy.ts
index 26684cd..5661dad 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -9,6 +9,7 @@ const isPublicRoute = createRouteMatcher([
   "/verify-email(.*)",
   "/health-card/(.*)",
   "/api/gdpr-export/(.*)",
+  "/opengraph-image",
   "/impressum",
   "/datenschutz",
   "/nutzungsbedingungen",