candle-annotator/openspec/changes/user-accounts
Marko Djordjevic 685639a0d3 Add getAuthUser() auth guard to all ML proxy API routes (task 7.3)
Adds authentication check at the top of each handler in:
- /api/predict
- /api/predict/batch
- /api/model/info
- /api/model/load
- /api/patterns/detect
- /api/patterns/available
- /api/training/start
- /api/training/runs

Returns 401 Unauthorized for unauthenticated requests. Proxy/fetch logic unchanged.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 13:10:23 +01:00
..
specs Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
.openspec.yaml Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
design.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
proposal.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
tasks.md Add getAuthUser() auth guard to all ML proxy API routes (task 7.3) 2026-02-20 13:10:23 +01:00
tasks_BACKUP.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00