mkelvers/mal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: properly handle delete user endpoint with correct route

Browse Source
This commit is contained in:
mkelvers
2026-04-22 21:36:20 +02:00
parent 5abc5cbb38
commit 9cd43d9c4c
2 changed files with 106 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
internal/server/routes.go
View File

@@ -108,19 +108,10 @@ func NewRouter(cfg Config) http.Handler {
// Admin Endpoints (protected by admin middleware in route handlers)
mux.Handle("/admin", middleware.RequireAdmin(http.HandlerFunc(adminHandler.HandleAdminPage)))
mux.Handle("/admin/users", middleware.RequireAdmin(http.HandlerFunc(adminHandler.HandleAddUserForm)))
mux.Handle("/admin/users/", middleware.RequireAdmin(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
path := r.URL.Path
switch {
case strings.HasSuffix(path, "/delete"):
adminHandler.HandleDeleteUser(w, r)
case strings.HasSuffix(path, "/watchlist"):
adminHandler.HandleUserWatchlist(w, r)
case strings.HasSuffix(path, "/continue-watching"):
adminHandler.HandleUserContinueWatching(w, r)
default:
adminHandler.HandleImpersonateUser(w, r)
}
})))
mux.HandleFunc("/admin/users/delete", func(w http.ResponseWriter, r *http.Request) {
middleware.RequireAdmin(http.HandlerFunc(adminHandler.HandleDeleteUserRouter)).ServeHTTP(w, r)
})
mux.Handle("/admin/users/", middleware.RequireAdmin(http.HandlerFunc(adminHandler.HandleUserRouter)))
// Wrap mux with global CSRF origin verification and auth checking,
// THEN auth context parsing.