From d74bc257d8432f17e50b23ae713d7e0623a1fe0f Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Mon, 2 Mar 2026 16:27:41 +0000
Subject: [PATCH] fix(line): mark webhook route as plugin-authenticated

---
 src/line/monitor.lifecycle.test.ts | 3 +++
 src/line/monitor.ts                | 1 +
 2 files changed, 4 insertions(+)

diff --git a/src/line/monitor.lifecycle.test.ts b/src/line/monitor.lifecycle.test.ts
index f1d23a08f99..eafd330b79e 100644
--- a/src/line/monitor.lifecycle.test.ts
+++ b/src/line/monitor.lifecycle.test.ts
@@ -98,6 +98,9 @@ describe("monitorLineProvider lifecycle", () => {
     });
 
     await vi.waitFor(() => expect(registerPluginHttpRouteMock).toHaveBeenCalledTimes(1));
+    expect(registerPluginHttpRouteMock).toHaveBeenCalledWith(
+      expect.objectContaining({ auth: "plugin" }),
+    );
     expect(resolved).toBe(false);
 
     abort.abort();
diff --git a/src/line/monitor.ts b/src/line/monitor.ts
index 49fcc518a3f..84790e27e6a 100644
--- a/src/line/monitor.ts
+++ b/src/line/monitor.ts
@@ -288,6 +288,7 @@ export async function monitorLineProvider(
   const normalizedPath = normalizePluginHttpPath(webhookPath, "/line/webhook") ?? "/line/webhook";
   const unregisterHttp = registerPluginHttpRoute({
     path: normalizedPath,
+    auth: "plugin",
     pluginId: "line",
     accountId: resolvedAccountId,
     log: (msg) => logVerbose(msg),