From 638aa5e03354d1483547604aafb43f24d8aadb05 Mon Sep 17 00:00:00 2001 From: Cofez Date: Mon, 30 Mar 2026 12:17:34 +0100 Subject: [PATCH] recalculation endpoint --- backend/src/routes/risk-score.ts | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/backend/src/routes/risk-score.ts b/backend/src/routes/risk-score.ts index 4b9a9b1..9581518 100644 --- a/backend/src/routes/risk-score.ts +++ b/backend/src/routes/risk-score.ts @@ -6,6 +6,7 @@ import express, { Response } from 'express'; import { riskDetectionService } from '../services/risk-detection/risk-detection-service'; import { riskNotificationService } from '../services/risk-detection/risk-notification-service'; import { authenticate, AuthenticatedRequest } from '../middleware/auth'; +import { adminAuth } from '../middleware/admin'; import logger from '../config/logger'; const router = express.Router(); @@ -155,8 +156,10 @@ router.get('/', async (req: AuthenticatedRequest, res: Response) => { * description: Recalculation result * 401: * description: Unauthorized + * 403: + * description: Forbidden - Admin access required */ -router.post('/recalculate', async (req: AuthenticatedRequest, res: Response) => { +router.post('/recalculate', adminAuth, async (req: AuthenticatedRequest, res: Response) => { try { const userId = req.user?.id; @@ -167,9 +170,6 @@ router.post('/recalculate', async (req: AuthenticatedRequest, res: Response) => }); } - // TODO: Add admin check - // For now, allow any authenticated user to trigger recalculation - logger.info('Manual risk recalculation triggered', { user_id: userId }); const result = await riskDetectionService.recalculateAllRisks();