Enforcing Auth on Management Endpoints

Wilmoth-Technologies · Oct 23, 2024 · e934a29 · e934a29
1 parent cd0c69f
commit e934a29
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/app/filters/AuthFilter.scala b/app/filters/AuthFilter.scala
@@ -22,8 +22,13 @@ import scala.io.Source
 class AuthFilter @Inject()(implicit val mat: Materializer, ec: ExecutionContext) extends Filter {
 
   private val routeToRequiredScopes: Map[String, Set[String]] = Map(
-    "/api/protected-route" -> Set("manage:inventory"),
-    "/api/admin-route"     -> Set("admin:all")
+    "/management/getInventoryPhotos" -> Set("manage:inventory"),
+    "/management/getAllVin" -> Set("manage:inventory"),
+    "/management/getAllInventory" -> Set("manage:inventory"),
+    "/management/getInventoryItem" -> Set("manage:inventory"),
+    "/management/addInventory" -> Set("manage:inventory"),
+    "/management/updateInventory" -> Set("manage:inventory"),
+    "/management/deleteInventory" -> Set("manage:inventory"),
   )
 
   // Function to fetch JWKS from Auth0