revisi 9

middleware.ts

@@ -8,7 +8,13 @@ export async function middleware(request: NextRequest) {
 
   const { pathname } = request.nextUrl;
   // Allow public auth pages without role gate
-  const publicPaths = ["/login", "/forgot-password", "/reset-password"];
+  const publicPaths = [
+    "/login",
+    "/forgot-password",
+    "/reset-password",
+    // Public API endpoint for cron to trigger scraping (secured by CRON_SECRET in route)
+    "/api/cron-scraping",
+  ];
   const isPublic = publicPaths.some((p) => pathname.startsWith(p));
   if (isPublic) return response;