Add verifyUserIsServerAdmin middleware to supporter key endpoints

Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com>
Initial plan
2025-11-26 19:26:28 +00:00 · 2025-10-29 07:35:08 +00:00 · 2025-10-29 07:28:04 +00:00
1 changed files with 6 additions and 1 deletions
--- a/server/routers/external.ts
+++ b/server/routers/external.ts
@@ -542,9 +542,14 @@ authenticated.get(`/org/:orgId/overview`, verifyOrgAccess, org.getOrgOverview);

 authenticated.post(
    `/supporter-key/validate`,
+    verifyUserIsServerAdmin,
    supporterKey.validateSupporterKey
 );
-authenticated.post(`/supporter-key/hide`, supporterKey.hideSupporterKey);
+authenticated.post(
+    `/supporter-key/hide`,
+    verifyUserIsServerAdmin,
+    supporterKey.hideSupporterKey
+);

 unauthenticated.get(
    "/resource/:resourceGuid/auth",
Author	SHA1	Message	Date
copilot-swe-agent[bot]	b61cdb63d3	Add verifyUserIsServerAdmin middleware to supporter key endpoints Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com>	2025-10-29 07:35:08 +00:00
copilot-swe-agent[bot]	6ca93fbd4e	Initial plan	2025-10-29 07:28:04 +00:00