feat: secure genrate key endpoint

.gitea/workflows/release.yml

@@ -34,6 +34,8 @@ jobs:
 
       - name: Build and Push
         uses: https://github.com/docker/build-push-action@v5
+        env:
+          SQLX_OFFLINE: true
         with:
           context: .
           push: true

Dockerfile

@@ -17,6 +17,7 @@ RUN rm -rf src
 
 # Build actual app
 COPY src ./src
+COPY .sqlx ./.sqlx
 RUN cargo build --release
 
 # ── Runtime Stage ─────────────────────────────────────────────────────────────

src/main.rs

@@ -55,7 +55,13 @@ async fn main() {
 
     let cors = CorsLayer::new()
         .allow_origin(cors_origin.parse::<HeaderValue>().unwrap())
-        .allow_methods([Method::GET, Method::POST, Method::PUT, Method::DELETE])
+        .allow_methods([
+            Method::GET,
+            Method::POST,
+            Method::PUT,
+            Method::DELETE,
+            Method::OPTIONS,
+        ])
         .allow_headers([
             header::CONTENT_TYPE,
             header::AUTHORIZATION,

src/routes/v1/mod.rs

@@ -27,7 +27,7 @@ pub fn protected_router() -> Router<AppState> {
         .route(
             "/keys/generate",
             post(apikey::create_api_key).route_layer(middleware::from_fn(|req, next| {
-                require_roles(req, next, None, None)
+                require_roles(req, next, None, Some("admin"))
             })),
         )
 }