candle-annotator/openspec/changes/user-accounts
Marko Djordjevic 9901d0f3f1 Add getAuthUser() auth guard to all data API routes (task 7.1)
Add 401 Unauthorized check at the top of every handler in:
- /api/upload (POST)
- /api/candles (GET)
- /api/charts (GET) and /api/charts/[id] (GET, DELETE)
- /api/annotations (GET, POST, DELETE) and /api/annotations/[id] (PATCH, DELETE)
- /api/annotation-types (GET, POST, DELETE) and /api/annotation-types/[id] (PATCH)
- /api/span-annotations (GET, POST, DELETE), /[id] (PATCH, DELETE), /export (GET)
- /api/span-label-types (GET, POST) and /[id] (PATCH, DELETE)
- /api/export (GET) and /api/export/spans (GET)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 10:26:09 +01:00
..
specs Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
.openspec.yaml Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
design.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
proposal.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
tasks.md Add getAuthUser() auth guard to all data API routes (task 7.1) 2026-02-20 10:26:09 +01:00
tasks_BACKUP.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00