Enhance upload handling: add db-backed upload rate limiting and lease management, enforce stricter validation for deployment configurations, optimize test suite and retired functionality, and improve input handling and error recovery.

2026-10-13 14:16:32 +02:00
parent dd23a19ed2
commit 5489e03138
10 changed files with 85 additions and 27 deletions
@@ -3,16 +3,15 @@ import {requireLogin, requireAdmin} from "../middleware/auth.js";

 export function createAdminMarketRouter(repositories) {
    const router = express.Router();
-    router.use(requireLogin, requireAdmin);
-    router.get("/admin/reports", (_req, res) => res.json({
+    router.get("/admin/reports", requireLogin, requireAdmin, (_req, res) => res.json({
        reports: repositories.listMarketReports(),
        personas: repositories.listMarketPersonas({admin: true, username: _req.session.user})
    }));
-    router.post("/admin/reports/:id", (req, res) => {
+    router.post("/admin/reports/:id", requireLogin, requireAdmin, (req, res) => {
        repositories.updateMarketReportStatus(Number(req.params.id), String(req.body?.status || "reviewed").trim() || "reviewed");
        return res.json({message: "Report updated"});
    });
-    router.post("/admin/personas/market/:id/moderate", (req, res) => {
+    router.post("/admin/personas/market/:id/moderate", requireLogin, requireAdmin, (req, res) => {
        const status = String(req.body?.status || "approved").trim() || "approved";
        repositories.updateMarketModeration(Number(req.params.id), {
            status,