From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 16 Jun 2025 17:24:17 +0000 (+0000)
Subject: API: Require authentication for all upload endpoints
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a3f7b0a454c40884176facd8a721d4fdd92bb166;p=pbs.git

API: Require authentication for all upload endpoints

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/api/uploads.py b/src/api/uploads.py
index 0b7221eb..fe1273fb 100644
--- a/src/api/uploads.py
+++ b/src/api/uploads.py
@@ -22,6 +22,7 @@ import fastapi
 import uuid
 
 from . import app
+from . import auth
 from . import backend
 
 from .. import uploads
@@ -30,6 +31,11 @@ from .. import uploads
 router = fastapi.APIRouter(
 	prefix="/uploads",
 	tags=["Uploads"],
+
+	# All requests must be authenticated
+	dependencies=[
+		fastapi.Depends(auth.get_current_principal),
+	],
 )
 
 @router.get("/{id}")