fix: Apply auth to public upload, not private

theopensystemslab · Nov 15, 2023 · 8bbde4b · 8bbde4b
1 parent 7cce5f9
commit 8bbde4b
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/api.planx.uk/modules/file/routes.ts b/api.planx.uk/modules/file/routes.ts
@@ -17,14 +17,14 @@ const router = Router();
 router.post(
   "/public/upload",
   multer().single("file"),
+  useTeamEditorAuth,
   validate(uploadFileSchema),
   publicUploadController,
 );
 
 router.post(
   "/private/upload",
   multer().single("file"),
-  useTeamEditorAuth,
   validate(uploadFileSchema),
   privateUploadController,
 );

diff --git a/api.planx.uk/server.ts b/api.planx.uk/server.ts
@@ -178,7 +178,6 @@ app.use("/webhooks", webhookRoutes);
 app.use("/analytics", analyticsRoutes);
 app.use("/admin", adminRoutes);
 app.use(ordnanceSurveyRoutes);
-app.use(fileRoutes);
 app.use("/file", fileRoutes);
 
 app.use("/gis", router);