From 46d54503eeefe9fdae84ccd884c1feaff4361e42 Mon Sep 17 00:00:00 2001
From: Catherine <whitequark@whitequark.org>
Date: Fri, 19 Sep 2025 14:10:26 +0000
Subject: [PATCH] Fix DNS allowlist not applying to `POST` requests.

---
 src/auth.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/auth.go b/src/auth.go
index 23007cd..ef3c4a7 100644
--- a/src/auth.go
+++ b/src/auth.go
@@ -206,7 +206,7 @@ func AuthorizeRequest(r *http.Request) (*Authorization, error) {
 	}
 
 	// DNS allowlist gives authority to update but not delete.
-	if r.Method == http.MethodPut || r.Method == http.MethodPut {
+	if r.Method == http.MethodPut || r.Method == http.MethodPost {
 		auth, err = authorizeDNSAllowlist(r)
 		if err != nil && IsUnauthorized(err) {
 			causes = append(causes, err)