admin/changemaker.lite
1
0
Fork 0
Code Issues Packages Projects Releases 35 Wiki Activity

Temp user updates and several bug fixes

Browse Source
This commit is contained in:
admin
2025-08-03 16:08:11 -06:00
parent 6d12d1aef1
commit 567917c013
19 changed files with 843 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
map/app/routes/index.js
View File

@@ -1,6 +1,6 @@
const express = require('express');
const path = require('path');
const { requireAuth, requireAdmin } = require('../middleware/auth');
const { requireAuth, requireAdmin, requireNonTemp } = require('../middleware/auth');
// Import route modules
const authRoutes = require('./auth');
@@ -53,7 +53,7 @@ module.exports = (app) => {
app.use('/api/locations', requireAuth, locationRoutes);
app.use('/api/geocode', requireAuth, geocodingRoutes);
app.use('/api/settings', requireAuth, settingsRoutes);
app.use('/api/shifts', shiftsRoutes);
app.use('/api/shifts', requireNonTemp, shiftsRoutes);
app.use('/api/external', externalDataRoutes);
// Admin routes
@@ -164,12 +164,12 @@ module.exports = (app) => {
});
// Protected page route
app.get('/shifts.html', requireAuth, (req, res) => {
app.get('/shifts.html', requireNonTemp, (req, res) => {
res.sendFile(path.join(__dirname, '../public', 'shifts.html'));
});
// User profile page route
app.get('/user.html', requireAuth, (req, res) => {
app.get('/user.html', requireNonTemp, (req, res) => {
res.sendFile(path.join(__dirname, '../public', 'user.html'));
});

6
map/app/routes/locations.js
View File

@@ -2,7 +2,7 @@ const express = require('express');
const router = express.Router();
const locationsController = require('../controllers/locationsController');
const { strictLimiter } = require('../middleware/rateLimiter');
const { requireAuth } = require('../middleware/auth');
const { requireAuth, requireDeletePermission } = require('../middleware/auth');
// Get all locations (public)
router.get('/', locationsController.getAll);
@@ -16,7 +16,7 @@ router.post('/', requireAuth, strictLimiter, locationsController.create);
// Update location (requires authentication)
router.put('/:id', requireAuth, strictLimiter, locationsController.update);
// Delete location (requires authentication)
router.delete('/:id', requireAuth, strictLimiter, locationsController.delete);
// Delete location (requires authentication and delete permission)
router.delete('/:id', requireAuth, requireDeletePermission, strictLimiter, locationsController.delete);
module.exports = router;