Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-10-27 11:18:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add admin middleware for StatsController

Browse Source
This commit is contained in:
advplyr 2025-03-29 17:37:13 -05:00
parent 4fb5330308
commit 73c1ea92f3
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/controllers/StatsController.js
View File

@ -65,7 +65,7 @@ class StatsController {
*/
async middleware(req, res, next) {
if (!req.user.isAdminOrUp) {
Logger.error(`[StatsController] Non-root user "${req.user.username}" attempted to access stats route`)
Logger.error(`[StatsController] Non-admin user "${req.user.username}" attempted to access stats route`)
return res.sendStatus(403)
}

4
server/routers/ApiRouter.js
View File

@ -322,8 +322,8 @@ class ApiRouter {
//
// Stats Routes
//
this.router.get('/stats/year/:year', StatsController.getAdminStatsForYear.bind(this))
this.router.get('/stats/server', StatsController.getServerStats.bind(this))
this.router.get('/stats/year/:year', StatsController.middleware.bind(this), StatsController.getAdminStatsForYear.bind(this))
this.router.get('/stats/server', StatsController.middleware.bind(this), StatsController.getServerStats.bind(this))
//
// Misc Routes