Require auth for beta application review routes

This commit is contained in:
stringadmin
2026-06-08 16:20:45 +08:00
parent 9d604b5dd9
commit 6f8658bf85
+3 -3
View File
@@ -1,6 +1,6 @@
"use strict";
const { getUserContextById, verifyToken } = require("../auth");
const { getUserContextById, requireAuth, verifyToken } = require("../auth");
const { pool, withTransaction } = require("../db");
const { loadBetaInviteCodes, normalizeBetaInviteCode } = require("../betaInviteCodes");
@@ -274,7 +274,7 @@ function registerBetaApplicationRoutes(router) {
}
});
router.get("/admin/beta-applications", requireBetaApplicationReviewer, async (req, res) => {
router.get("/admin/beta-applications", requireAuth, requireBetaApplicationReviewer, async (req, res) => {
try {
await ensureBetaApplicationSchema();
const status = cleanText(req.query.status, 32);
@@ -305,7 +305,7 @@ function registerBetaApplicationRoutes(router) {
}
});
router.patch("/admin/beta-applications/:id", requireBetaApplicationReviewer, async (req, res) => {
router.patch("/admin/beta-applications/:id", requireAuth, requireBetaApplicationReviewer, async (req, res) => {
const id = Number(req.params.id);
const action = cleanText(req.body?.action, 32);
const reviewNote = cleanText(req.body?.reviewNote ?? req.body?.review_note, 1000) || null;