From 81f781be480452fc2595d6f9718c4cbd35382e32 Mon Sep 17 00:00:00 2001 From: SysAdmin Date: Mon, 6 Oct 2025 15:47:35 +0100 Subject: [PATCH] Fix: Allow anonymous access to BTCPay webhook endpoint MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Added [AllowAnonymous] attribute to PaymentWebhook endpoint - Resolves authentication errors preventing BTCPay Server callbacks - Webhook endpoint now accepts unauthenticated POST requests 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- LittleShop/Controllers/OrdersController.cs | 1 + 1 file changed, 1 insertion(+) diff --git a/LittleShop/Controllers/OrdersController.cs b/LittleShop/Controllers/OrdersController.cs index cf0c440..c9dc969 100644 --- a/LittleShop/Controllers/OrdersController.cs +++ b/LittleShop/Controllers/OrdersController.cs @@ -171,6 +171,7 @@ public class OrdersController : ControllerBase // Webhook endpoint for BTCPay Server [HttpPost("payments/webhook")] + [AllowAnonymous] public async Task PaymentWebhook([FromBody] PaymentWebhookDto webhookDto) { var success = await _cryptoPaymentService.ProcessPaymentWebhookAsync(