From 430d7a18aece0da65f65290d4d0c3ecc31bd4ab8 Mon Sep 17 00:00:00 2001
From: Arthur Danjou <arthurdanjou@outlook.fr>
Date: Sat, 17 Apr 2021 14:20:22 +0200
Subject: [PATCH] Add posts likes security

---
 start/routes.ts | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/start/routes.ts b/start/routes.ts
index 266cf0d..48cd921 100644
--- a/start/routes.ts
+++ b/start/routes.ts
@@ -55,10 +55,17 @@ Route.group(() => {
 }).middleware('auth:web')
 
 Route.group(() => {
+  // ArtAPI
   Route.post('form', 'FormsController.send')
   Route.post('/states/:state', 'StatesController.set')
   Route.post('/stats/build', 'StatesController.incrementBuild')
   Route.post('/stats/command', 'StatesController.incrementCommand')
+  // ArtSite
+  Route.group(() => {
+    Route.get('/:slug', 'PostsController.getLikes')
+    Route.post('/:slug/like', 'PostsController.like')
+    Route.post('/:slug/unlike', 'PostsController.unlike')
+  }).prefix('posts')
 }).middleware('auth:api')
 
 Route.group(() => {
@@ -70,13 +77,3 @@ Route.group(() => {
   Route.post('/api/login', 'AuthController.loginApi')
   Route.post('/api/logout', 'AuthController.logoutApi')
 }).prefix('auth')
-
-// ArtSite
-Route.group(() => {
-  Route.get('/:slug', 'PostsController.getLikes')
-  Route.post('/:slug/like', 'PostsController.like')
-  Route.post('/:slug/unlike', 'PostsController.unlike')
-  Route.get('/is/:slug', async ({response}) => {
-    return response.send(false)
-  })
-}).prefix('posts')