Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-05-04 01:17:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add admin middleware for StatsController

Browse Source
This commit is contained in:
advplyr 2025-03-29 17:37:13 -05:00
parent 4fb5330308
commit 73c1ea92f3
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/controllers/StatsController.js
View File

@ -65,7 +65,7 @@ class StatsController {
*/ */
async middleware(req, res, next) { async middleware(req, res, next) {
if (!req.user.isAdminOrUp) { if (!req.user.isAdminOrUp) {
Logger.error(`[StatsController] Non-root user "${req.user.username}" attempted to access stats route`) Logger.error(`[StatsController] Non-admin user "${req.user.username}" attempted to access stats route`)
return res.sendStatus(403) return res.sendStatus(403)
} }

4
server/routers/ApiRouter.js
View File

@ -322,8 +322,8 @@ class ApiRouter {
// //
// Stats Routes // Stats Routes
// //
this.router.get('/stats/year/:year', StatsController.getAdminStatsForYear.bind(this)) this.router.get('/stats/year/:year', StatsController.middleware.bind(this), StatsController.getAdminStatsForYear.bind(this))
this.router.get('/stats/server', StatsController.getServerStats.bind(this)) this.router.get('/stats/server', StatsController.middleware.bind(this), StatsController.getServerStats.bind(this))
// //
// Misc Routes // Misc Routes