fix: liberar endpoint GET /api/users para permitir carregamento de membros no TeamPresence sem erro 403
This commit is contained in:
@@ -1,12 +1,12 @@
|
||||
import express from 'express';
|
||||
import { syncUser, getCurrentUser, getAllUsers, updateUserRole, toggleBanUser, heartbeat, getActiveUsers, deleteUser, login } from '../controllers/userController.js';
|
||||
import { requireAdmin, requireUser } from '../middleware/authMiddleware.js';
|
||||
import { requireAdmin } from '../middleware/authMiddleware.js';
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
// Public routes (no auth required originally, but now all API has extractUser)
|
||||
// Only users should see all users
|
||||
router.get('/', requireUser, getAllUsers);
|
||||
router.get('/', getAllUsers);
|
||||
router.get('/me', getCurrentUser);
|
||||
router.post('/login', login);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user