updated temp user control access and limited data send for temps

This commit is contained in:
2025-08-04 12:54:04 -06:00
parent 567917c013
commit 63c5f9a7fa
5 changed files with 207 additions and 22 deletions

View File

@@ -1,14 +1,14 @@
const express = require('express');
const router = express.Router();
const locationsController = require('../controllers/locationsController');
const { strictLimiter } = require('../middleware/rateLimiter');
const { strictLimiter, conditionalTempLimiter } = require('../middleware/rateLimiter');
const { requireAuth, requireDeletePermission } = require('../middleware/auth');
// Get all locations (public)
router.get('/', locationsController.getAll);
// Get all locations (apply stricter rate limiting for temp users)
router.get('/', conditionalTempLimiter, locationsController.getAll);
// Get single location (public)
router.get('/:id', locationsController.getById);
// Get single location (apply stricter rate limiting for temp users)
router.get('/:id', conditionalTempLimiter, locationsController.getById);
// Create location (requires authentication)
router.post('/', requireAuth, strictLimiter, locationsController.create);