groombook/app
Archived
13
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(GRO-874): add requireSuperUser() to GET /api/admin/settings/logo #355

Closed
groombook-engineer[bot] wants to merge 1 commits from fix/gro-867-logo-proxy into main
pull from: fix/gro-867-logo-proxy
merge into: groombook:main
Conversation 2 Commits 1 Files Changed 1
+1 -1

1 Commits

Author SHA1 Message Date
Flea Flicker 3d45582609 fix(GRO-874): add requireSuperUser() to GET /api/admin/settings/logo 
The logo proxy route was missing auth middleware, allowing any
unauthenticated caller to receive the presigned S3 URL and exposing
the internal Ceph RGW hostname. Matches auth pattern used by all
other /api/admin/* routes in this file.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-22 03:42:29 +00:00