API: Require authentication for all upload endpoints

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/api/uploads.py b/src/api/uploads.py
index 0b7221eb80f08f59b046ef37270ef708cbc8b97e..fe1273fbeb355a85d9de7f830cab1885842dfca9 100644 (file)
--- a/src/api/uploads.py
+++ b/src/api/uploads.py
@@ -22,6 +22,7 @@ import fastapi
 import uuid
 
 from . import app
+from . import auth
 from . import backend
 
 from .. import uploads
@@ -30,6 +31,11 @@ from .. import uploads
 router = fastapi.APIRouter(
        prefix="/uploads",
        tags=["Uploads"],
+
+       # All requests must be authenticated
+       dependencies=[
+               fastapi.Depends(auth.get_current_principal),
+       ],
 )
 
 @router.get("/{id}")