From 456d53fc7f2df6c2f295911d350114d3d9ea17a2 Mon Sep 17 00:00:00 2001
From: Jason Woltje <jason@diversecanvas.com>
Date: Sun, 8 Mar 2026 17:54:35 -0500
Subject: [PATCH] fix(api): add SkipCsrf to queue notification ack endpoint

---
 .../src/queue-notifications/queue-notifications.controller.ts   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/api/src/queue-notifications/queue-notifications.controller.ts b/apps/api/src/queue-notifications/queue-notifications.controller.ts
index e5cbba2..5ab8109 100644
--- a/apps/api/src/queue-notifications/queue-notifications.controller.ts
+++ b/apps/api/src/queue-notifications/queue-notifications.controller.ts
@@ -1,5 +1,6 @@
 import { Controller, Get, Param, Post, Res, UseGuards } from "@nestjs/common";
 import type { Response } from "express";
+import { SkipCsrf } from "../common/decorators/skip-csrf.decorator";
 import { ApiKeyGuard } from "../common/guards/api-key.guard";
 import {
   QueueNotificationsService,
@@ -22,6 +23,7 @@ export class QueueNotificationsController {
     await this.queueNotificationsService.streamNotifications(res);
   }
 
+  @SkipCsrf()
   @Post("notifications/:id/ack")
   async ackNotification(@Param("id") id: string): Promise<{ success: true; id: string }> {
     return this.queueNotificationsService.ackNotification(id);