Function authHook

packages/http-routes/src/auth.ts:37–52

(request: FastifyRequest, reply: FastifyReply)

}

export async function authHook(request: FastifyRequest, reply: FastifyReply): Promise<void> {
  if (!cachedToken) return

  const url = request.url

  if (url.startsWith('/api/')) {
    return requireBearerToken(request, reply)
  }

  if (url.startsWith('/_web/')) {
    if (requireAuthEnabled) return requireBearerToken(request, reply)
    return
  }

  // Static files and SPA fallback are public
}

function requireBearerToken(request: FastifyRequest, reply: FastifyReply): void {
  if (!cachedToken) return