333332

server.js

@@ -16,6 +16,13 @@ app.use(cors());
 app.use(express.json());
 app.use(express.static(path.join(__dirname, 'public')));
 
+function requireAuth(req, res, next) {
+    if (!req.session || !req.session.authenticated) {
+        return res.status(401).json({ error: 'Unauthorized' });
+    }
+    next();
+}
+
 // Session configuration
 app.use(session({
     secret: process.env.SESSION_SECRET || 'default-secret-change-this',