Extract shared 401/403 gate into permission-middleware and sweep the four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions). Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| .. | ||
| admin | ||
| auth | ||
| cards | ||
| collections | ||
| community | ||
| cron | ||
| decks | ||
| invite | ||
| public | ||
| scan | ||
| user | ||
| users | ||
| auth-utils.js | ||
| collections.js | ||
| decks.js | ||
| favorites.js | ||
| health.js | ||
| user-cards.js | ||