fix: MCP endpoint at /api/mcp (Bug #2) + REST API key auth (Bug #3)

Bug #2 (LOW): MCP endpoint was mounted at /mcp instead of /api/mcp,
inconsistent with all other API routes. Changed app.route("/mcp", ...)
to app.route("/api/mcp", ...) in apps/api/src/index.ts.

Bug #3 (MEDIUM): REST API endpoints only accepted JWT cookie/session
auth, not API key auth. Added authenticateApiKey() to authMiddleware
in apps/api/src/middleware/auth.ts so REST endpoints now accept
Authorization: Bearer <api_key> as a fallback after JWT verification.
This commit is contained in:
Hermes
2026-08-01 11:33:12 +00:00
parent a80207fc9a
commit 118617c892
4 changed files with 41 additions and 3 deletions
+1 -1
View File
@@ -59,7 +59,7 @@ app.route("/api/error-log", errorLogRoutes);
app.route("/api/analytics", analyticsRoutes);
app.route("/api", importExportRoutes);
app.route("/api", realtimeRoutes);
app.route("/mcp", mcpRoutes);
app.route("/api/mcp", mcpRoutes);
const port = parseInt(process.env.PORT || "3001", 10);