Put the feedback and tickets admin areas behind the shared identity (#13)

Reviewed-on: #13 Co-authored-by: Patrick Müller <mail@pmueller.me> Co-committed-by: Patrick Müller <mail@pmueller.me>
2026-09-06 19:06:30 +00:00
parent bf7be65b03
commit 3c892d02ed
20 changed files with 457 additions and 309 deletions
@@ -16,9 +16,9 @@ export const songsAdminRouter = express.Router();
 *      put:
 *          summary: Edit a song's title/composer
 *          tags: [feedback-admin]
+ *          security:
+ *              - AdminSessionCookie: []
 *          parameters:
- *              - $ref: '#/components/parameters/SessionIdHeader'
- *              - $ref: '#/components/parameters/SessionKeyHeader'
 *              - in: path
 *                name: songId
 *                required: true
@@ -45,13 +45,15 @@ export const songsAdminRouter = express.Router();
 *                  description: Unknown song
 *              401:
 *                  description: Unauthorized
+ *              403:
+ *                  description: Signed in without the permission for this app, or account disabled
 *      delete:
 *          summary: Remove a song
 *          description: Past answers keep their song_title_snapshot even after the song is removed.
 *          tags: [feedback-admin]
+ *          security:
+ *              - AdminSessionCookie: []
 *          parameters:
- *              - $ref: '#/components/parameters/SessionIdHeader'
- *              - $ref: '#/components/parameters/SessionKeyHeader'
 *              - in: path
 *                name: songId
 *                required: true
@@ -64,6 +66,8 @@ export const songsAdminRouter = express.Router();
 *                  description: Unknown song
 *              401:
 *                  description: Unauthorized
+ *              403:
+ *                  description: Signed in without the permission for this app, or account disabled
 */
 songsAdminRouter.put('/:songId', async (req: Request, res: Response) => {
 	try {