give visitor information only authenticated

This commit is contained in:
wodka 2019-07-15 00:26:37 +02:00
parent 42c110beea
commit 4997514f01

View File

@ -32,7 +32,7 @@ module.exports = function(app) {
app.route('/forms/:formIdFast([a-zA-Z0-9]+)')
.post(forms.createSubmission);
app.route('/forms')
.get(auth.isAuthenticatedOrApiKey, forms.list)
.post(auth.isAuthenticatedOrApiKey, forms.create);
@ -47,8 +47,9 @@ module.exports = function(app) {
.get(auth.isAuthenticatedOrApiKey, forms.hasAuthorization, forms.listSubmissions)
.delete(auth.isAuthenticatedOrApiKey, forms.hasAuthorization, forms.deleteSubmissions);
app.route('/forms/:formIdNoMiddleware([a-zA-Z0-9]+)/visitors')
.get(auth.isAuthenticatedOrApiKey, forms.getVisitorData);
app.route('/forms/:formId([a-zA-Z0-9]+)/visitors')
.get(auth.isAuthenticatedOrApiKey, forms.hasAuthorization, forms.getVisitorData);
// Slower formId middleware
app.param('formId', forms.formByID);