1d7b4d7abd
The API router's parse_path() only stripped /api from the URI, but when deployed in a subdirectory (e.g. /protocol-droid/), the URI is /protocol-droid/api/auth/register — the /api regex didn't match. Now detects base path from SCRIPT_NAME and strips it before routing.