refactor(auth): add withAdmin() wrapper for admin API routes #68

Merged
varutasu merged 1 commit from refactor/with-admin-wrapper into main 2026-06-02 13:42:22 -04:00

1 commit

Author SHA1 Message Date
Randall Stillwell
bd865719a2 refactor(auth): add withAdmin() wrapper for admin API routes.
Extract shared 401/403 gate into permission-middleware and sweep the
four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-02 11:02:46 -05:00