From f58904a6f9928685d9d33f7a8f96a5501bb5f6c2 Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Fri, 8 Aug 2014 11:14:53 -0700 Subject: Require login for most things --- app.js | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) (limited to 'app.js') diff --git a/app.js b/app.js index 43270b09..6302df7a 100644 --- a/app.js +++ b/app.js @@ -88,25 +88,23 @@ app.get('/logout', sessions.destroy); - app.get('/:user/exists', users.exists); - - app.get('/:user.json', users.json); - app.get('/users/new', users["new"]); app.post('/users', users.create); app.get('/:user/edit', authorize, users.edit); - app.post('/:user', users.update); + app.post('/:user', authorize, users.update); app.get('/:user/transactions.json', authorize, transactions.json); - app.post('/:user/transactions', transactions.create); + app.post('/:user/transactions', authorize, transactions.create); app.get('/:user/report', authorize, transactions.index); - app.get('/:user', users.show); + app.get('/:user', authorize, users.show); + + app.get('/:user.json', authorize, users.json); app.use(require('connect-assets')({ src: 'public', -- cgit v1.2.3