clank/clank-together
1
0
Fork 0
Code Issues Wiki Activity

Accept admin API tokens for accept-regressions

Browse source 
POST /api/admin/batches/:id/accept-regressions is admin-only; like batch review and task updates, an admin API token can now call it without a browser session.
This commit is contained in:
ragnarok-clanker 2026-10-28 16:27:53 +01:00
commit 2e3d5a404a
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/server/app.js
View file

@ -1118,7 +1118,7 @@ export function createApp(ctx) {
// An admin merges a batch that came back only for lowering matching scores (merge.js). // An admin merges a batch that came back only for lowering matching scores (merge.js).
router.on('POST', '/api/admin/batches/:id/accept-regressions', async ({ req, params }) => { router.on('POST', '/api/admin/batches/:id/accept-regressions', async ({ req, params }) => {
const user = auth(req, { role: 'admin', session: true }); const user = auth(req, { role: 'admin' });
const body = await readJson(req, 16 * 1024); const body = await readJson(req, 16 * 1024);
const r = merger.acceptRegressions(user, intParam(params.id), body.comment ? String(body.comment) : null); const r = merger.acceptRegressions(user, intParam(params.id), body.comment ? String(body.comment) : null);
if (runsWorker) setImmediate(() => merger.pump().catch(() => {})); if (runsWorker) setImmediate(() => merger.pump().catch(() => {}));