deckhearth/pages/api/admin
Randall Stillwell bd865719a2 refactor(auth): add withAdmin() wrapper for admin API routes.
Extract shared 401/403 gate into permission-middleware and sweep the
four inline admin checks (import MTG/Pokemon, sync-catalog, card-submissions).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-02 11:02:46 -05:00
..
card-submissions.js refactor(auth): add withAdmin() wrapper for admin API routes. 2026-06-02 11:02:46 -05:00
index.js fix(security): drop wildcard CORS + redundant OPTIONS from 24 API routes (P0 #5) 2026-05-24 20:41:38 -05:00
sync-catalog.js refactor(auth): add withAdmin() wrapper for admin API routes. 2026-06-02 11:02:46 -05:00