Put the feedback and tickets admin areas behind the shared identity (#13)

Reviewed-on: #13 Co-authored-by: Patrick Müller <mail@pmueller.me> Co-committed-by: Patrick Müller <mail@pmueller.me>
2026-09-06 19:06:30 +00:00
parent bf7be65b03
commit 3c892d02ed
20 changed files with 457 additions and 309 deletions
@@ -16,14 +16,15 @@ adminRouter.use(requireAdminAuth);
 *      get:
 *          summary: Validate the current admin session
 *          tags: [tickets-admin]
- *          parameters:
- *              - $ref: '#/components/parameters/SessionIdHeader'
- *              - $ref: '#/components/parameters/SessionKeyHeader'
+ *          security:
+ *              - AdminSessionCookie: []
 *          responses:
 *              200:
 *                  description: Success
 *              401:
 *                  description: Unauthorized
+ *              403:
+ *                  description: Signed in without the permission for this app, or account disabled
 */
 adminRouter.get('/me', (req: Request, res: Response) => {
 	res.status(200).send({email: res.locals.admin.email, fullName: res.locals.admin.displayName});