kikootwo f9947b745e Add requireSetupIncompleteOrAdmin and adjust routes ...

Introduce a new middleware requireSetupIncompleteOrAdmin that allows unauthenticated access while the setup wizard is in progress but enforces admin authentication once setup is complete. Replace requireSetupIncomplete with the new guard in test-paths, test-abs and test-oidc API routes. Update the front-end hook to use fetchWithAuth for authenticated requests. Revise setup-guard tests to cover the new semantics: shared endpoints now return 401 when setup is complete and no auth is provided, return 403 for authenticated non-admin users, and allow admin access or unauthenticated access during setup/DB-unready conditions; also add jwt verification and user lookup mocks to the tests.

2026-02-09 21:45:37 -05:00

..

route.ts

Add requireSetupIncompleteOrAdmin and adjust routes

2026-02-09 21:45:37 -05:00