From ba81447d106c80a64e411a8ca3044bd2929b94f6 Mon Sep 17 00:00:00 2001 From: Michael SCHAL Date: Thu, 22 Jan 2026 14:41:03 +0100 Subject: [PATCH] fix authentification --- server/routes.ts | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/server/routes.ts b/server/routes.ts index 69dac8a..b1e963b 100644 --- a/server/routes.ts +++ b/server/routes.ts @@ -57,11 +57,7 @@ function requireAdmin(req: Request, res: Response, next: NextFunction) { export async function registerRoutes(app: Express): Promise { - // Analytics Routes - app.use("/api/analytics", requireAuth, analyticsRouter); - // Reels & Music Routes - app.use("/api", requireAuth, reelsRouter); // Routes d'authentification app.post("/api/auth/login", (req, res, next) => { @@ -329,11 +325,18 @@ export async function registerRoutes(app: Express): Promise { res.json({ isDefault: isDefaultPassword }); } catch (error) { - console.error("Error checking default password:", error); - res.status(500).json({ error: "Erreur lors de la vérification" }); + console.error("Error checking default password status:", error); + res.status(500).json({ error: "Erreur lors de la vérification du statut du mot de passe" }); } }); + // Analytics Routes + app.use("/api/analytics", requireAuth, analyticsRouter); + + // Reels & Music Routes + app.use("/api", requireAuth, reelsRouter); + + // Route SQL (réservée aux admins) - DÉSACTIVÉE EN PRODUCTION sauf si explicitement autorisée app.post("/api/sql/execute", requireAdmin, async (req, res) => { // Vérification de sécurité: désactivé en production sauf si ALLOW_SQL_CONSOLE=true