From 4ce08ea2f828628e86331a109598b954870ae284 Mon Sep 17 00:00:00 2001
From: Ranabir Guin <ran@Ranabirs-MacBook-Pro.local>
Date: Sat, 15 May 2021 00:04:34 -0700
Subject: add auth requirement for admin routes (will update to admin_auth when
 avail)

---
 routes/admin.js | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/routes/admin.js b/routes/admin.js
index 7cc02ba6..8cc93663 100644
--- a/routes/admin.js
+++ b/routes/admin.js
@@ -10,6 +10,7 @@ const { v4: uuidv4 } = require('uuid')
 //    { users: <list of users }
 router.get(
   "/users",
+  auth,
   ah(async (req, res) => {
     var users = await db.User.findAll()
 
@@ -24,6 +25,7 @@ router.get(
 //    { referrals: <list of referral tokens> }
 router.get(
   "/referrals",
+  auth,
   ah(async (req, res) => {
     var referrals = await db.Referral.findAll()
 
@@ -38,6 +40,7 @@ router.get(
 //    { referrals: <list of referral tokens> }
 router.get(
   "/user_accounts",
+  auth,
   ah(async (req, res) => {
     var accounts = await db.User.findAll({
       include: [
@@ -46,7 +49,7 @@ router.get(
     })
 
     debug('accounts: ' + JSON.stringify(accounts))
-    return res.send({accounts: accounts})
+    return res.send({users: accounts})
   })
 );
 
@@ -65,6 +68,7 @@ router.get(
 //    }
 router.get(
   "/user_transactions",
+  auth,
   ah(async (req, res) => {
     var transactions = await db.User.findAll({
       include: [
@@ -75,7 +79,7 @@ router.get(
     })
 
     debug('transactions: ' + JSON.stringify(transactions))
-    return res.send({transactions: transactions})
+    return res.send({users: transactions})
   })
 );
 
-- 
cgit v1.2.3