From 34ba1b781ca5b6c17576814eeb1a3a1114d13443 Mon Sep 17 00:00:00 2001
From: hamed <15238-genius.ha@users.noreply.drupalcode.org>
Date: Fri, 12 Jun 2026 14:52:50 +0330
Subject: [PATCH] fix: update clinicAddresses assignment for improved data
 handling

---
 assets/admin/pages/ClinicDetailPage.tsx | 2 +-
 config/packages/security.yaml           | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/assets/admin/pages/ClinicDetailPage.tsx b/assets/admin/pages/ClinicDetailPage.tsx
index b6e9f22a..57a99ccf 100644
--- a/assets/admin/pages/ClinicDetailPage.tsx
+++ b/assets/admin/pages/ClinicDetailPage.tsx
@@ -560,7 +560,7 @@ export default function ClinicDetailPage() {
     queryFn:  () => api.get<ApiResponse<ClinicAddress[]>>(`/api/v1/clinic/${uuid}/addresses`),
     enabled:  !!uuid,
   });
-  const clinicAddresses: ClinicAddress[] = clinicAddressesQ.data?.data ?? [];
+  const clinicAddresses: ClinicAddress[] = (clinicAddressesQ.data?.data as any)?.data ?? clinicAddressesQ.data?.data ?? [];
 
   const [addrFormOpen,    setAddrFormOpen]    = useState(false);
   const [editingClinicAddr, setEditingClinicAddr] = useState<ClinicAddress | null>(null);
diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index 0cabab4d..5455770c 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -33,7 +33,7 @@ security:
             provider: api_doc_provider
 
         public_endpoints:
-            pattern: ^/(api/v1/user/(send-code|verify-code|register|otp-login|reset-password)|oauth/token$|session/token|api/v1/categorys/|api/v1/doctors$|api/v1/clinics$|api/v1/clinic/doctor-list/|api/v1/clinic/[^/]+/addresses$|api/v1/clinic-pro/doctor-addresses/|api/v1/appointment-slots|api/v1/appointment-settings/available-locations/|api/v1/comments/|api/v1/rate/|api/v1/blogs$|api/v1/clinic-invitation/|api/v1/pre-registration$)
+            pattern: ^/(api/v1/user/(send-code|verify-code|register|otp-login|reset-password)|oauth/token$|session/token|api/v1/categorys/|api/v1/doctors$|api/v1/clinics$|api/v1/clinic/doctor-list/|api/v1/clinic/[^/]+/addresses$|api/v1/clinic-pro/doctor-addresses/|api/v1/appointment-slots|api/v1/comments/|api/v1/rate/|api/v1/blogs$|api/v1/clinic-invitation/|api/v1/pre-registration$)
             stateless: true
             security: false
 
@@ -78,7 +78,6 @@ security:
           roles: PUBLIC_ACCESS
         - { path: ^/api/v1/clinic/doctor-list/,            roles: PUBLIC_ACCESS }
         - { path: '^/api/v1/clinic/[^/]+/addresses$',      roles: PUBLIC_ACCESS }
-        - { path: ^/api/v1/appointment-settings/available-locations/, roles: PUBLIC_ACCESS }
         - { path: ^/api/v1/clinic-pro/doctor-addresses/,   roles: PUBLIC_ACCESS }
         - { path: ^/api/v1/clinics$,                       roles: PUBLIC_ACCESS }
         - path: '^/api/v1/clinic/[^/]+$'