From 2f031fc2e960b10fbb08200009ca061508525451 Mon Sep 17 00:00:00 2001 From: Akshay Date: Wed, 5 Mar 2025 21:28:28 +0000 Subject: [PATCH] require auth for issue modifications --- appview/state/state.go | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/appview/state/state.go b/appview/state/state.go index b935e1f6..3843c1ae 100644 --- a/appview/state/state.go +++ b/appview/state/state.go @@ -815,11 +815,15 @@ func (s *State) UserRouter() http.Handler { r.Route("/issues", func(r chi.Router) { r.Get("/", s.RepoIssues) r.Get("/{issue}", s.RepoSingleIssue) - r.Get("/new", s.NewIssue) - r.Post("/new", s.NewIssue) - r.Post("/{issue}/comment", s.IssueComment) - r.Post("/{issue}/close", s.CloseIssue) - r.Post("/{issue}/reopen", s.ReopenIssue) + + r.Group(func(r chi.Router) { + r.Use(AuthMiddleware(s)) + r.Get("/new", s.NewIssue) + r.Post("/new", s.NewIssue) + r.Post("/{issue}/comment", s.IssueComment) + r.Post("/{issue}/close", s.CloseIssue) + r.Post("/{issue}/reopen", s.ReopenIssue) + }) }) r.Route("/pulls", func(r chi.Router) { -- 2.51.2