security(pitch-deck): remove temp public fp-patch, re-secure admin endpoint
All checks were successful
Build pitch-deck / build-push-deploy (push) Successful in 1m14s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-consent (push) Successful in 32s
CI / test-python-voice (push) Successful in 33s
CI / test-bqas (push) Successful in 30s

Patch executed successfully on production. Temp endpoint removed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Benjamin Admin
2026-04-21 17:49:31 +02:00
parent f86dc265eb
commit e5bb8e65e8
3 changed files with 4 additions and 89 deletions

View File

@@ -1,11 +1,14 @@
import { NextRequest, NextResponse } from 'next/server'
import { requireAdmin } from '@/lib/admin-auth'
import pool from '@/lib/db'
/**
* TEMPORARY: Auth disabled for one-time patch. Will be re-secured immediately after.
* Admin-only patch endpoint for Finanzplan data corrections.
* POST /api/admin/fp-patch
*/
export async function POST(request: NextRequest) {
const guard = await requireAdmin(request)
if (guard.kind === 'response') return guard.response
const results: string[] = []