fixed

Author: kayprogrammer

routes/routers.go

@@ -63,7 +63,7 @@ func SetupRoutes(app *fiber.App, db *gorm.DB) {
 	// Book Routes (24)
 	bookRouter := api.Group("/books")
 	bookRouter.Get("", endpoint.GetLatestBooks)
-	bookRouter.Post("", endpoint.CreateBook)
+	bookRouter.Post("", endpoint.AdminMiddleware, endpoint.CreateBook)
 	bookRouter.Get("/bookmarked", endpoint.AuthMiddleware, endpoint.GetBookmarkedBooks)
 	bookRouter.Get("/book/:slug/bookmark", endpoint.AuthMiddleware, endpoint.BookmarkBook)
 	bookRouter.Post("/book/:slug/report", endpoint.AuthMiddleware, endpoint.ReportBook)
@@ -80,12 +80,12 @@ func SetupRoutes(app *fiber.App, db *gorm.DB) {
 	bookRouter.Get("/book/:slug/vote", endpoint.AuthMiddleware, endpoint.VoteBook)
 	bookRouter.Get("/lanterns-generation/:amount", endpoint.AuthMiddleware, endpoint.ConvertCoinsToLanterns)
 
-	bookRouter.Put("/book/:slug", endpoint.UpdateBook)
-	bookRouter.Delete("/book/:slug", endpoint.DeleteBook)
-	bookRouter.Post("/book/:slug/set-contract", endpoint.SetContract)
-	bookRouter.Put("/book/chapter/:slug", endpoint.UpdateChapter)
-	bookRouter.Delete("/book/chapter/:slug", endpoint.DeleteChapter)
-	bookRouter.Post("/book/:slug/add-chapter", endpoint.AddChapter)
+	bookRouter.Put("/book/:slug", endpoint.AdminMiddleware, endpoint.UpdateBook)
+	bookRouter.Delete("/book/:slug", endpoint.AdminMiddleware, endpoint.DeleteBook)
+	bookRouter.Post("/book/:slug/set-contract", endpoint.AdminMiddleware, endpoint.SetContract)
+	bookRouter.Put("/book/chapter/:slug", endpoint.AdminMiddleware, endpoint.UpdateChapter)
+	bookRouter.Delete("/book/chapter/:slug", endpoint.AdminMiddleware, endpoint.DeleteChapter)
+	bookRouter.Post("/book/:slug/add-chapter", endpoint.AdminMiddleware, endpoint.AddChapter)
 
 	bookRouter.Get("/book/chapters/chapter/:slug", endpoint.AuthMiddleware, endpoint.GetBookChapter)
 	bookRouter.Get("/book/chapters/chapter/:slug/paragraph/:index/comments", endpoint.AuthMiddleware, endpoint.GetParagraphComments)
@@ -126,7 +126,7 @@ func SetupRoutes(app *fiber.App, db *gorm.DB) {
 	// ADMIN ROUTES (7)
 	adminRouter := api.Group("/admin", endpoint.AdminMiddleware)
 	adminRouter.Get("/", endpoint.AdminDashboard)
-	adminUsersRouter := adminRouter.Group("/users")
+	adminUsersRouter := adminRouter.Group("/users", endpoint.AdminMiddleware)
 	// Admin Users
 	adminRouter.Put("/", endpoint.UpdateProfile)
 	adminUsersRouter.Get("", endpoint.AdminGetUsers)