updated temp user control access and limited data send for temps
This commit is contained in:
@@ -1,14 +1,14 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const locationsController = require('../controllers/locationsController');
|
||||
const { strictLimiter } = require('../middleware/rateLimiter');
|
||||
const { strictLimiter, conditionalTempLimiter } = require('../middleware/rateLimiter');
|
||||
const { requireAuth, requireDeletePermission } = require('../middleware/auth');
|
||||
|
||||
// Get all locations (public)
|
||||
router.get('/', locationsController.getAll);
|
||||
// Get all locations (apply stricter rate limiting for temp users)
|
||||
router.get('/', conditionalTempLimiter, locationsController.getAll);
|
||||
|
||||
// Get single location (public)
|
||||
router.get('/:id', locationsController.getById);
|
||||
// Get single location (apply stricter rate limiting for temp users)
|
||||
router.get('/:id', conditionalTempLimiter, locationsController.getById);
|
||||
|
||||
// Create location (requires authentication)
|
||||
router.post('/', requireAuth, strictLimiter, locationsController.create);
|
||||
|
||||
Reference in New Issue
Block a user