From 4569e538b78d842fa0da9deb0799e3f8961cc01e Mon Sep 17 00:00:00 2001
From: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>
Date: Sat, 11 Apr 2026 22:30:30 -0500
Subject: [PATCH] add auth exceptions for exports

---
 frigate/api/auth.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/frigate/api/auth.py b/frigate/api/auth.py
index a7edb6ad4..d1c968818 100644
--- a/frigate/api/auth.py
+++ b/frigate/api/auth.py
@@ -88,7 +88,9 @@ def require_admin_by_default():
         "/go2rtc/streams",
         "/event_ids",
         "/events",
+        "/cases",
         "/exports",
+        "/jobs/export",
     }
 
     # Path prefixes that should be exempt (for paths with parameters)
@@ -101,7 +103,9 @@ def require_admin_by_default():
         "/go2rtc/streams/",  # /go2rtc/streams/{camera}
         "/users/",  # /users/{username}/password (has own auth)
         "/preview/",  # /preview/{file}/thumbnail.jpg
+        "/cases/",  # /cases/{case_id}
         "/exports/",  # /exports/{export_id}
+        "/jobs/export/",  # /jobs/export/{export_id}
         "/vod/",  # /vod/{camera_name}/...
         "/notifications/",  # /notifications/pubkey, /notifications/register
     )