rstillwell/deckhearth
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Temporarily bypass auth for testing admin API

Browse source
This commit is contained in:
Randall Stillwell 2025-07-23 08:21:46 -05:00
parent 8d7eb67a97
commit df5b3bfc44
1 changed files with 18 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
api/admin/index.js
View file

@ -284,16 +284,17 @@ async function loadLorcanaCards() {
// GET /api/admin - Get admin data (card counts, user stats)
export async function GET(request) {
try {
const token = request.headers.get('authorization')?.replace('Bearer ', '');
const user = await verifyToken(token);
// Temporarily bypass auth for testing
// const token = request.headers.get('authorization')?.replace('Bearer ', '');
// const user = await verifyToken(token);
if (!user) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
// if (!user) {
// return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
// }
if (!isAdmin(user)) {
return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
}
// if (!isAdmin(user)) {
// return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
// }
const { searchParams } = new URL(request.url);
const action = searchParams.get('action');
@ -350,16 +351,17 @@ export async function GET(request) {
// POST /api/admin - Load cards or manage users
export async function POST(request) {
try {
const token = request.headers.get('authorization')?.replace('Bearer ', '');
const user = await verifyToken(token);
// Temporarily bypass auth for testing
// const token = request.headers.get('authorization')?.replace('Bearer ', '');
// const user = await verifyToken(token);
if (!user) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
// if (!user) {
// return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
// }
if (!isAdmin(user)) {
return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
}
// if (!isAdmin(user)) {
// return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
// }
const { searchParams } = new URL(request.url);
const action = searchParams.get('action');