bcgov / bc-emli-pin-mgmt-be

BC Virtual Home Energy Rating PIN Management System Backend
Apache License 2.0
1 stars 0 forks source link

BVPS-287: Add token auth to all non-api key endpoints #99

Closed hannah-macdonald1 closed 1 year ago

hannah-macdonald1 commented 1 year ago

This PR adds token authentication to all endpoints except api key endpoints and /helloworld. It also adds permission checks for PROPERTY_SEARCH (Admin and above) and VIEW_PIN (SuperAdmin only) on the /property/details api, so ensure that your user is present in the database with sufficient permissions to access this api correctly.

Note: Please run npm run db:migrate to obtain the necessary permissions in order for this to work!