From c190a417b3a6e43bc4d4db4252b4cd3bbd5e9070 Mon Sep 17 00:00:00 2001
From: Hein <hein.puth@gmail.com>
Date: Thu, 5 Mar 2026 01:35:36 +0200
Subject: [PATCH] feat(api): align legacy /api/* handlers with ResolveSpec auth
 method

---
 pkg/api/server.go | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pkg/api/server.go b/pkg/api/server.go
index 302fc46..f95b354 100644
--- a/pkg/api/server.go
+++ b/pkg/api/server.go
@@ -80,6 +80,15 @@ func NewServer(cfg *config.Config, db *bun.DB, wh WhatsHookedInterface) (*Server
 	}
 	restheadspec.RegisterSecurityHooks(handler, securityList)
 
+	// Ensure legacy /api/* handlers use the same ResolveSpec auth method.
+	// This keeps JWT + phase1 auth behavior aligned across /api and /api/v1.
+	wh.Handlers().WithAuthConfig(&handlers.AuthConfig{
+		Validator: func(r *http.Request) bool {
+			_, err := secProvider.Authenticate(r)
+			return err == nil
+		},
+	})
+
 	// Create router
 	router := mux.NewRouter()