From ebd8f1ebb8f59ff50202774385f578a7723c5d2d Mon Sep 17 00:00:00 2001
From: cynfo3000 <cynfo3000@cynfo.net>
Date: Tue, 10 Mar 2026 00:15:17 +0100
Subject: [PATCH] fix: agent permission erlaubt /api/v1/agent/register (BSD
 Agent braucht das zum Start)

---
 backend/api/middleware.go | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/backend/api/middleware.go b/backend/api/middleware.go
index 0571368..991a406 100644
--- a/backend/api/middleware.go
+++ b/backend/api/middleware.go
@@ -129,8 +129,10 @@ func hasAPIKeyPermission(key *db.APIKey, r *http.Request) bool {
 
 	switch perm {
 	case "agent":
-		// Nur Agent-Endpunkte: WS-Connect und Heartbeat
-		return path == "/api/v1/agent/ws" || path == "/api/v1/agent/heartbeat"
+		// Nur Agent-Endpunkte: Registrierung, WS-Connect, Heartbeat
+		return path == "/api/v1/agent/ws" ||
+			path == "/api/v1/agent/heartbeat" ||
+			path == "/api/v1/agent/register"
 
 	case "read":
 		// Nur GET-Requests, keine destruktiven Aktionen