gsadmin/DynamoDNS
1
0
Fork 0
mirror of https://github.com/freedbygrace/DynamoDNS.git synced 2026-07-27 11:58:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix webhooks page access and add authentication

Browse Source 
Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9111ef36-26c8-4085-84ca-a35dc1fec1b5
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7083d608-d6d3-4a6a-9a27-6286c5109627/fcf59a0f-c1e7-497b-9dcd-51a657a3f2a9.jpg
This commit is contained in:
alphaeusmote
2025-04-10 02:30:58 +00:00
parent 3b778071c5 0ceaf78243
commit 4df486bc2f
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/routes.ts
+17 -2
View File
@@ -821,14 +821,29 @@ export async function registerRoutes(app: Express): Promise<Server> {
});
// Webhooks
app.get("/api/webhooks", requireRole(["admin", "manager"]), async (req, res) => {
app.get("/api/webhooks", async (req, res) => {
try {
// Check if user is authenticated
if (!req.isAuthenticated()) {
return res.status(401).json({ message: "Not authenticated" });
}
// Check if user has appropriate role (admin or manager)
const userRole = req.user?.role;
if (userRole !== 'admin' && userRole !== 'manager') {
return res.status(403).json({ message: "Insufficient permissions" });
}
let webhooks;
const orgId = req.query.organizationId as string;
if (orgId) {
// For specific organization, check if user belongs to that org
if (userRole !== "admin" && req.user?.organizationId !== orgId) {
return res.status(403).json({ message: "Insufficient permissions" });
}
webhooks = await storage.getWebhooksByOrganization(orgId);
} else if (req.user?.role === "admin") {
} else if (userRole === "admin") {
// Admins can see all webhooks
const allOrgs = await storage.getOrganizations();
webhooks = await Promise.all(