From 43b92cb95ad2c0efb9052c0724361ac7d3f7dc83 Mon Sep 17 00:00:00 2001
From: Oliver Bryan <04oliverbryan@gmail.com>
Date: Mon, 22 Dec 2025 03:24:27 +0000
Subject: [PATCH] all routes require auth

---
 packages/backend/src/index.ts | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/packages/backend/src/index.ts b/packages/backend/src/index.ts
index 87c618f..10ea2de 100644
--- a/packages/backend/src/index.ts
+++ b/packages/backend/src/index.ts
@@ -13,19 +13,19 @@ const main = async () => {
         routes: {
             "/": withCors(() => new Response(`title: eussi\ndev-mode: ${DEV}\nport: ${PORT}`)),
 
-            "/issue/create": withCors(routes.issueCreate),
-            "/issue/update": withCors(routes.issueUpdate),
-            "/issue/delete": withCors(routes.issueDelete),
-            "/issues/:projectBlob": withCors(routes.issuesInProject),
-            "/issues/all": withCors(routes.issues),
+            "/issue/create": withCors(withAuth(routes.issueCreate)),
+            "/issue/update": withCors(withAuth(routes.issueUpdate)),
+            "/issue/delete": withCors(withAuth(routes.issueDelete)),
+            "/issues/:projectBlob": withCors(withAuth(routes.issuesInProject)),
+            "/issues/all": withCors(withAuth(routes.issues)),
 
-            "/project/create": withCors(routes.projectCreate),
-            "/project/update": withCors(routes.projectUpdate),
-            "/project/delete": withCors(routes.projectDelete),
-            "/projects/by-owner": withCors(routes.projectsByOwner),
-            "/projects/all": withCors(routes.projectsAll),
-            "/projects/with-owners": withCors(routes.projectsWithOwners),
-            "/project/with-owner": withCors(routes.projectWithOwner),
+            "/project/create": withCors(withAuth(routes.projectCreate)),
+            "/project/update": withCors(withAuth(routes.projectUpdate)),
+            "/project/delete": withCors(withAuth(routes.projectDelete)),
+            "/projects/by-owner": withCors(withAuth(routes.projectsByOwner)),
+            "/projects/all": withCors(withAuth(routes.projectsAll)),
+            "/projects/with-owners": withCors(withAuth(routes.projectsWithOwners)),
+            "/project/with-owner": withCors(withAuth(routes.projectWithOwner)),
         },
     });