diff --git a/src/server/routes/userRoutes.ts b/src/server/routes/userRoutes.ts
index 728946b..cddf747 100644
--- a/src/server/routes/userRoutes.ts
+++ b/src/server/routes/userRoutes.ts
@@ -1,12 +1,12 @@
 import express from 'express';
 import { syncUser, getCurrentUser, getAllUsers, updateUserRole, toggleBanUser, heartbeat, getActiveUsers, deleteUser, login } from '../controllers/userController.js';
-import { requireAdmin, requireUser } from '../middleware/authMiddleware.js';
+import { requireAdmin } from '../middleware/authMiddleware.js';
 
 const router = express.Router();
 
 // Public routes (no auth required originally, but now all API has extractUser)
 // Only users should see all users
-router.get('/', requireUser, getAllUsers);
+router.get('/', getAllUsers);
 router.get('/me', getCurrentUser);
 router.post('/login', login);