Allow bearer auth for admin API

server/api/admin/album.delete.ts

@@ -6,7 +6,7 @@ import { parseMongoId, validationResponse } from "../../utils/api-validation"
 import { tryDeleteObject, tryDeleteObjectPrefix } from "../../utils/object-storage"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const query = getQuery(event)
 	const parsedId = parseMongoId(query.id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)

server/api/admin/album.patch.ts

@@ -7,7 +7,7 @@ import { parseMongoId, validationResponse } from "../../utils/api-validation"
 import { Album } from "../../models/album"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parsedId = parseMongoId(getQuery(event).id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)
 	const parts = await readAdminForm(event)

server/api/admin/album.post.ts

@@ -5,7 +5,7 @@ import { Album } from "../../models/album"
 import mongoose from "mongoose"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parts = await readAdminForm(event)
 	const name = adminFormText(parts, "name")
 	const artistInput = adminFormTexts(parts, "artists")

server/api/admin/artist.delete.ts

@@ -11,7 +11,7 @@ async function findDependents(model: typeof Track | typeof Album, field: string,
 }
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const query = getQuery(event)
 	const parsedId = parseMongoId(query.id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)

server/api/admin/artist.patch.ts

@@ -7,7 +7,7 @@ import { parseMongoId, validationResponse } from "../../utils/api-validation"
 import { Artist } from "../../models/artist"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parsedId = parseMongoId(getQuery(event).id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)
 	const parts = await readAdminForm(event)

server/api/admin/artist.post.ts

@@ -4,7 +4,7 @@ import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../..
 import { Artist } from "../../models/artist"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parts = await readAdminForm(event)
 	const name = adminFormText(parts, "name")
 	const file = adminFormFile(parts, "file")

server/api/admin/genre.delete.ts

@@ -5,7 +5,7 @@ import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../..
 import { parseMongoId } from "../../utils/api-validation"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 
 	const query = getQuery(event)
 	const parsedId = parseMongoId(query.id)

server/api/admin/genre.patch.ts

@@ -4,7 +4,7 @@ import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../..
 import { parseMongoId } from "../../utils/api-validation"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 
 	const parsedId = parseMongoId(getQuery(event).id)
 	if ("error" in parsedId) {

server/api/admin/genre.post.ts

@@ -3,7 +3,7 @@ import { Genre } from "../../models/genre"
 import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../../utils/auth"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 
 	const body = await readBody<unknown>(event)
 	if (!body || typeof body !== "object" || Array.isArray(body)) {

server/api/admin/track.delete.ts

@@ -5,7 +5,7 @@ import { parseMongoId, validationResponse } from "../../utils/api-validation"
 import { tryDeleteObjectPrefix } from "../../utils/object-storage"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parsedId = parseMongoId(getQuery(event).id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)
 

server/api/admin/track.patch.ts

@@ -8,7 +8,7 @@ import { parseMongoId, validationResponse } from "../../utils/api-validation"
 import { Track } from "../../models/track"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parsedId = parseMongoId(getQuery(event).id)
 	if ("error" in parsedId) return validationResponse(event, parsedId.error)
 	const parts = await readAdminForm(event)

server/api/admin/track.post.ts

@@ -6,7 +6,7 @@ import { defineAuthenticatedEventHandler, requireAuthenticatedUser } from "../..
 import { Track } from "../../models/track"
 
 export default defineAuthenticatedEventHandler(async (event) => {
-	await requireAuthenticatedUser(event, true)
+	await requireAuthenticatedUser(event, true, { allowBearer: true, skipOriginCheck: true })
 	const parts = await readAdminForm(event)
 	const name = adminFormText(parts, "name")
 	const album = adminFormText(parts, "album")