make sure the first account is issued

canonical · Jul 11, 2024 · b533462 · b533462
1 parent f78aff3
commit b533462
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/internal/api/middleware.go b/internal/api/middleware.go
@@ -5,6 +5,7 @@ import (
 	"log"
 	"net/http"
 	"regexp"
+	"strconv"
 	"strings"
 
 	"github.com/canonical/gocert/internal/metrics"
@@ -108,8 +109,10 @@ func authMiddleware(ctx *middlewareContext) middleware {
 				return
 			}
 			if r.Method == "POST" && strings.HasSuffix(r.URL.Path, "accounts") && !ctx.firstAccountIssued {
-				ctx.firstAccountIssued = true
 				next.ServeHTTP(w, r)
+				if strings.HasPrefix(strconv.Itoa(ctx.responseStatusCode), "2") {
+					ctx.firstAccountIssued = true
+				}
 				return
 			}
 			authHeader := r.Header.Get("Authorization")