mirror of
https://github.com/ipnet-mesh/meshcore-hub.git
synced 2026-07-04 17:00:59 +02:00
Louis King
829971c174
The web proxy's endpoint access mapping previously required one of (admin/operator/member) roles for PUT /api/v1/user/profile. This blocked OIDC users with no assigned roles from saving their own profile. Add an _AUTHENTICATED sentinel access level that grants access to any logged-in user regardless of roles, and apply it to the profile PUT endpoint. The API layer already enforces owner-only checks via RequireUserOwner, so the proxy role gate was redundant.