diff --git a/src/routes/content.ts b/src/routes/content.ts
index 6e03013..7650a78 100644
--- a/src/routes/content.ts
+++ b/src/routes/content.ts
@@ -78,8 +78,8 @@ content.get('/qa-pairs', requireAuth, async (c) => {
   }
 })
 
-// GET /assets/:fileId  [auth]
-content.get('/assets/:fileId', requireAuth, async (c) => {
+// GET /assets/:fileId  — public (images are non-sensitive learning content)
+content.get('/assets/:fileId', async (c) => {
   const fileId = c.req.param('fileId')
   if (!fileId) return c.json({ error: 'fileId required' }, 400)
   const assetUrl = dAssetUrl(fileId)