From 726f897c3da581ba97292fd1d44b6cd9a44752b6 Mon Sep 17 00:00:00 2001
From: Thomas Bartelt <tb@tel.bar>
Date: Sun, 13 Sep 2026 19:52:45 +0200
Subject: [PATCH] chore(dev): payment_webhook.php ohne Basic-Auth erreichbar

---
 .htaccess | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.htaccess b/.htaccess
index 42445c1..1bcc8df 100644
--- a/.htaccess
+++ b/.htaccess
@@ -3,6 +3,11 @@ AuthType Basic
 AuthName "Dev-Server intelectra"
 AuthUserFile /etc/apache2/htpasswd_dev_intelectra
 Require valid-user
+# 13.09.2026: Webhook-Endpunkt der Zahlungsanbieter muss ohne Basic-Auth erreichbar sein
+# (PayPal stellt sonst nicht zu). Der Endpunkt prueft die Signatur selbst.
+<Files "payment_webhook.php">
+    Require all granted
+</Files>
 # === ENDE Auth-Block ===