mirror of
https://github.com/ipnet-mesh/meshcore-hub.git
synced 2026-07-03 08:21:09 +02:00
829971c174
The web proxy's endpoint access mapping previously required one of (admin/operator/member) roles for PUT /api/v1/user/profile. This blocked OIDC users with no assigned roles from saving their own profile. Add an _AUTHENTICATED sentinel access level that grants access to any logged-in user regardless of roles, and apply it to the profile PUT endpoint. The API layer already enforces owner-only checks via RequireUserOwner, so the proxy role gate was redundant.