From 9e674f44aa95a0f137081a21de2a83a9c813dd71 Mon Sep 17 00:00:00 2001
From: Jake Jarvis <jake@jarv.is>
Date: Thu, 5 Mar 2026 19:21:23 -0500
Subject: [PATCH] Fix /setup unreachable for unauthenticated users

The proxy treated /setup as a protected route, redirecting unauthenticated
users to /login. This made first-run TMDB onboarding unreachable since
no users exist yet. Add /setup to public auth routes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 proxy.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/proxy.ts b/proxy.ts
index 84caa97..86e319e 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -1,7 +1,7 @@
 import { getSessionCookie } from "better-auth/cookies";
 import { type NextRequest, NextResponse } from "next/server";
 
-const authRoutes = new Set(["/login", "/register"]);
+const authRoutes = new Set(["/login", "/register", "/setup"]);
 
 export function proxy(request: NextRequest) {
   const sessionCookie = getSessionCookie(request);