From 83513828c67fa578acdb9451d1f9b2d73a83d557 Mon Sep 17 00:00:00 2001
From: neodk2004 <barac.daniel@gmail.com>
Date: Tue, 11 Aug 2026 14:27:10 +0200
Subject: [PATCH] fix(proxy): allow unauthenticated access to
 /api/gdpr-export/[token]
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Clerk route matcher was redirecting the new GDPR export download
link to /sign-in, breaking the pawfeed.org token flow just shipped —
found while live-testing the link right after deploy.
---
 src/proxy.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/proxy.ts b/src/proxy.ts
index 29cece7..26684cd 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -8,6 +8,7 @@ const isPublicRoute = createRouteMatcher([
   "/reset-password(.*)",
   "/verify-email(.*)",
   "/health-card/(.*)",
+  "/api/gdpr-export/(.*)",
   "/impressum",
   "/datenschutz",
   "/nutzungsbedingungen",