MythEclipse/GMW
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(backend): only require auth for voice/media routes, rest public

Browse Source 
Messages, analysis, mascot-chat, recordings, ui-state, and guilds
endpoints are now accessible without authentication.
Only voice (connect/disconnect/transmit) and media (queue/skip/stop/volume)
remain behind the admin password guard.
This commit is contained in:
asepharyana
2026-07-02 06:51:57 +07:00
parent 0ae1ef1987
commit ffea9bb0ba
1 changed files with 7 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/backend/src/http/app.ts
+7 -8
View File
@@ -73,19 +73,18 @@ export function createHttpApp(): Express {
// Public read-only endpoints
app.use("/api", createConfigRouter());
app.use("/api", createDashboardRouter());
app.use("/api", createMessagesRouter());
app.use("/api", createAnalysisRouter());
app.use("/api", createMascotChatRouter());
app.use("/api", createRecordingsRouter());
app.use("/api", createUiStateRouter());
app.use("/api/guilds", createGuildsRouter());
// Protected routes — require admin authentication (X-Admin-Password header)
// Only voice and media control endpoints need auth
const adminAuthMiddleware = adminAuth(ADMIN_PASSWORD);
app.use("/api", adminAuthMiddleware, createMessagesRouter());
app.use("/api", adminAuthMiddleware, createAnalysisRouter());
app.use("/api", adminAuthMiddleware, createMascotChatRouter());
app.use("/api", adminAuthMiddleware, createMediaRouter());
app.use("/api", adminAuthMiddleware, createVoiceRouter());
app.use("/api", adminAuthMiddleware, createRecordingsRouter());
app.use("/api", adminAuthMiddleware, createUiStateRouter());
// Guilds routes
app.use("/api/guilds", adminAuthMiddleware, createGuildsRouter());
// 404 handler
app.use((_req: Request, res: Response) => {