mirror of
https://github.com/GMWalletApp/epusdt.git
synced 2026-07-07 18:26:16 +00:00
fix(http): block /install page after setup is complete
- skip SPA fallback for `/install` and `/install/*` in main server - keep install wizard accessible only during `RunInstallServer` phase - prevent post-install access to install UI
This commit is contained in:
@@ -188,6 +188,8 @@ func registerAdminRoutes(e *echo.Echo) {
|
||||
|
||||
// Public (no JWT)
|
||||
adminV1.POST("/auth/login", admin.Ctrl.Login)
|
||||
adminV1.GET("/auth/init-password", admin.Ctrl.GetInitialPassword)
|
||||
adminV1.GET("/auth/init-password-hash", admin.Ctrl.GetInitialPasswordHash)
|
||||
|
||||
// Authenticated
|
||||
authed := adminV1.Group("", middleware.CheckAdminJWT())
|
||||
|
||||
Reference in New Issue
Block a user