Security: admin radio routes now require auth+admin.security, CORS default no longer wildcard, README security section

This commit is contained in:
root
2026-06-04 20:46:07 +02:00
parent 8a324b3082
commit 4d8d22f40a
3 changed files with 50 additions and 3 deletions
+1 -1
View File
@@ -6,7 +6,7 @@ use App\Http\Controllers\Api\FurniEditorController;
use Illuminate\Support\Facades\Route;
// Admin radio setup
Route::prefix('admin')->group(function () {
Route::prefix('admin')->middleware(['auth', 'admin.security'])->group(function () {
Route::get('/radio/setup', [RadioSetupController::class, 'index'])->name('admin.radio.setup');
Route::post('/radio/setup', [RadioSetupController::class, 'setup'])->name('admin.radio.setup.post');
Route::post('/radio/setup/do', [RadioSetupController::class, 'doSetup'])->name('admin.radio.setup.do');