@intranefr/superbackend 1.5.2 → 1.6.3

package/src/routes/adminLlm.routes.js

@@ -1,14 +1,15 @@
 const express = require("express");
 const router = express.Router();
-const { basicAuth } = require("../middleware/auth");
+const { adminSessionAuth } = require("../middleware/auth");
 const adminLlmController = require("../controllers/adminLlm.controller");
 const rateLimiter = require("../services/rateLimiter.service");
 
-router.get("/config", basicAuth, adminLlmController.getConfig);
-router.post("/config", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.saveConfig);
-router.get("/openrouter/models", basicAuth, adminLlmController.listOpenRouterModels);
-router.post("/prompts/:key/test", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.testPrompt);
-router.get("/audit", basicAuth, adminLlmController.listAudit);
-router.get("/costs", basicAuth, adminLlmController.listCosts);
+router.get("/config", adminSessionAuth, adminLlmController.getConfig);
+router.get("/providers", adminSessionAuth, adminLlmController.listProviders);
+router.post("/config", adminSessionAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.saveConfig);
+router.get("/openrouter/models", adminSessionAuth, adminLlmController.listOpenRouterModels);
+router.post("/prompts/:key/test", adminSessionAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.testPrompt);
+router.get("/audit", adminSessionAuth, adminLlmController.listAudit);
+router.get("/costs", adminSessionAuth, adminLlmController.listCosts);
 
 module.exports = router;

package/src/routes/adminLogin.routes.js

@@ -0,0 +1,23 @@
+const express = require('express');
+const router = express.Router();
+const adminLoginController = require('../controllers/adminLogin.controller');
+const { auditMiddleware } = require('../services/auditLogger');
+
+/**
+ * Admin Login Routes
+ * Handles both basic auth and IAM authentication through a unified login form
+ */
+
+// Serve login page
+router.get('/login', auditMiddleware('admin.login.view', { entityType: 'AdminSession' }), adminLoginController.getLogin);
+
+// Process login (supports both basic auth and IAM)
+router.post('/login', auditMiddleware('admin.login.attempt', { entityType: 'AdminSession' }), adminLoginController.postLogin);
+
+// Logout and clear session
+router.post('/logout', auditMiddleware('admin.logout', { entityType: 'AdminSession' }), adminLoginController.postLogout);
+
+// API endpoint to check authentication status
+router.get('/auth-status', adminLoginController.getAuthStatus);
+
+module.exports = router;

package/src/routes/adminMarkdowns.routes.js

@@ -0,0 +1,10 @@
+const express = require('express');
+const router = express.Router();
+const { adminSessionAuth } = require('../middleware/auth');
+
+const adminMarkdownsController = require('../controllers/adminMarkdowns.controller');
+
+router.use(adminSessionAuth);
+router.post('/validate-path', adminSessionAuth, adminMarkdownsController.validatePath);
+
+module.exports = router;

package/src/routes/adminMigration.routes.js

@@ -1,79 +1,79 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const { auditMiddleware } = require('../services/auditLogger');
 
 const adminMigrationController = require('../controllers/adminMigration.controller');
 
 router.get(
   '/environments',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.listEnvironments,
 );
 
 router.get(
   '/environments/:envKey',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.getEnvironment,
 );
 
 router.get(
   '/models',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.listModels,
 );
 
 router.get(
   '/models/:modelName/schema',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.getModelSchema,
 );
 
 router.post(
   '/preview',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.preview,
 );
 
 router.post(
   '/environments',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.environments.upsert', { entityType: 'GlobalSetting' }),
   adminMigrationController.upsertEnvironment,
 );
 
 router.delete(
   '/environments/:envKey',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.environments.delete', { entityType: 'GlobalSetting' }),
   adminMigrationController.deleteEnvironment,
 );
 
 router.post(
   '/test-connection',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_connection', { entityType: 'Migration' }),
   adminMigrationController.testConnection,
 );
 
 router.post(
   '/test-assets',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_assets', { entityType: 'Migration' }),
   adminMigrationController.testAssetsTarget,
 );
 
 router.post(
   '/test-assets-copy',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_assets_copy', { entityType: 'Migration' }),
   adminMigrationController.testAssetsCopyKey,
 );
 
 router.post(
   '/run',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.run', { entityType: 'Migration' }),
   adminMigrationController.runMigration,
 );

package/src/routes/adminPages.routes.js

@@ -1,6 +1,6 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminPages.controller');
 const adminBlockDefinitionsController = require('../controllers/adminBlockDefinitions.controller');
 const adminBlockDefinitionsAiController = require('../controllers/adminBlockDefinitionsAi.controller');
@@ -8,7 +8,7 @@ const adminContextBlockDefinitionsController = require('../controllers/adminCont
 const adminPagesContextBlocksAiController = require('../controllers/adminPagesContextBlocksAi.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/collections', controller.listCollections);
 router.get('/collections/:id', controller.getCollection);

package/src/routes/adminPlugins.routes.js

@@ -0,0 +1,15 @@
+const express = require('express');
+
+const { adminSessionAuth } = require('../middleware/auth');
+const controller = require('../controllers/adminPlugins.controller');
+
+const router = express.Router();
+
+router.use(adminSessionAuth);
+
+router.get('/', controller.list);
+router.post('/:id/enable', controller.enable);
+router.post('/:id/disable', controller.disable);
+router.post('/:id/install', controller.install);
+
+module.exports = router;

package/src/routes/adminProxy.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminProxy.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/entries', controller.list);
 router.get('/entries/:id', controller.get);

package/src/routes/adminRateLimits.routes.js

@@ -1,17 +1,17 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminRateLimitsController = require('../controllers/adminRateLimits.controller');
 
-router.get('/', basicAuth, adminRateLimitsController.list);
-router.get('/config', basicAuth, adminRateLimitsController.getConfig);
-router.put('/config', basicAuth, adminRateLimitsController.updateConfig);
-router.get('/metrics', basicAuth, adminRateLimitsController.getMetrics);
+router.get('/', adminSessionAuth, adminRateLimitsController.list);
+router.get('/config', adminSessionAuth, adminRateLimitsController.getConfig);
+router.put('/config', adminSessionAuth, adminRateLimitsController.updateConfig);
+router.get('/metrics', adminSessionAuth, adminRateLimitsController.getMetrics);
 
-router.post('/bulk-enabled', basicAuth, adminRateLimitsController.bulkEnabled);
+router.post('/bulk-enabled', adminSessionAuth, adminRateLimitsController.bulkEnabled);
 
-router.put('/:id', basicAuth, adminRateLimitsController.updateLimiter);
-router.post('/:id/reset', basicAuth, adminRateLimitsController.resetLimiter);
+router.put('/:id', adminSessionAuth, adminRateLimitsController.updateLimiter);
+router.post('/:id/reset', adminSessionAuth, adminRateLimitsController.resetLimiter);
 
 module.exports = router;

package/src/routes/adminRbac.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminRbac.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/rights', controller.listRights);
 router.get('/users', controller.searchUsers);

package/src/routes/adminRegistry.routes.js

@@ -0,0 +1,24 @@
+const express = require('express');
+
+const { adminSessionAuth } = require('../middleware/auth');
+const controller = require('../controllers/adminRegistry.controller');
+
+const router = express.Router();
+
+router.use(adminSessionAuth);
+
+router.get('/', controller.listRegistries);
+router.post('/', controller.createRegistry);
+router.get('/:id', controller.getRegistry);
+router.put('/:id', controller.updateRegistry);
+router.delete('/:id', controller.deleteRegistry);
+
+router.get('/:id/items', controller.listItems);
+router.post('/:id/items', controller.upsertItem);
+router.put('/:id/items/:itemId', controller.upsertItem);
+router.delete('/:id/items/:itemId', controller.deleteItem);
+
+router.post('/:id/tokens', controller.createToken);
+router.delete('/:id/tokens/:tokenId', controller.deleteToken);
+
+module.exports = router;

package/src/routes/adminScripts.routes.js

@@ -1,16 +1,19 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminScripts.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/', controller.listScripts);
 router.post('/', controller.createScript);
 router.get('/runs', controller.listRuns);
 router.get('/runs/:runId', controller.getRun);
-router.get('/runs/:runId/stream', controller.streamRun);
+router.get('/runs/:runId/stream', controller.streamRunLogs);
+router.get('/runs/:runId/programmatic-output', controller.getProgrammaticOutput);
+router.get('/runs/:runId/full-output', controller.getFullOutput);
+router.get('/runs/:runId/download', controller.downloadOutput);
 
 router.get('/:id', controller.getScript);
 router.put('/:id', controller.updateScript);

package/src/routes/adminSeoConfig.routes.js

@@ -1,21 +1,21 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminSeoConfigController = require('../controllers/adminSeoConfig.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.get('/', basicAuth, adminSeoConfigController.get);
-router.put('/', basicAuth, adminSeoConfigController.update);
+router.get('/', adminSessionAuth, adminSeoConfigController.get);
+router.put('/', adminSessionAuth, adminSeoConfigController.update);
 
 // SEO Config helpers
-router.get('/ai/views', basicAuth, adminSeoConfigController.seoConfigAiListViews);
-router.post('/ai/generate-entry', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiGenerateEntry);
-router.post('/ai/improve-entry', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiImproveEntry);
-router.post('/pages/apply-entry', basicAuth, adminSeoConfigController.seoConfigApplyEntry);
+router.get('/ai/views', adminSessionAuth, adminSeoConfigController.seoConfigAiListViews);
+router.post('/ai/generate-entry', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiGenerateEntry);
+router.post('/ai/improve-entry', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.seoConfigAiImproveEntry);
+router.post('/pages/apply-entry', adminSessionAuth, adminSeoConfigController.seoConfigApplyEntry);
 
-router.put('/og/svg', basicAuth, adminSeoConfigController.updateOgSvg);
-router.post('/og/generate-png', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.generateOgPng);
-router.post('/ai/edit-svg', basicAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.aiEditSvg);
+router.put('/og/svg', adminSessionAuth, adminSeoConfigController.updateOgSvg);
+router.post('/og/generate-png', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.generateOgPng);
+router.post('/ai/edit-svg', adminSessionAuth, rateLimiter.limit('seoAiLimiter'), adminSeoConfigController.aiEditSvg);
 
 module.exports = router;

package/src/routes/adminTelegram.routes.js

@@ -0,0 +1,14 @@
+const express = require('express');
+const router = express.Router();
+const adminTelegramController = require('../controllers/adminTelegram.controller');
+const { adminSessionAuth } = require('../middleware/auth');
+
+router.use(adminSessionAuth);
+
+router.get('/', adminTelegramController.listBots);
+router.post('/', adminTelegramController.createBot);
+router.put('/:id', adminTelegramController.updateBot);
+router.delete('/:id', adminTelegramController.deleteBot);
+router.post('/:id/toggle', adminTelegramController.toggleBot);
+
+module.exports = router;

package/src/routes/adminTerminals.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminTerminals.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/sessions', controller.createSession);
 router.get('/sessions', controller.listSessions);

package/src/routes/adminUiComponents.routes.js

@@ -1,12 +1,12 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminUiComponentsController = require('../controllers/adminUiComponents.controller');
 const adminUiComponentsAiController = require('../controllers/adminUiComponentsAi.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/projects', adminUiComponentsController.listProjects);
 router.post('/projects', adminUiComponentsController.createProject);

package/src/routes/adminUploadNamespaces.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminUploadNamespacesController = require('../controllers/adminUploadNamespaces.controller');
 
-router.get('/', basicAuth, adminUploadNamespacesController.listNamespaces);
-router.get('/summary', basicAuth, adminUploadNamespacesController.getNamespacesSummary);
-router.get('/:key', basicAuth, adminUploadNamespacesController.getNamespace);
-router.post('/', basicAuth, adminUploadNamespacesController.createNamespace);
-router.put('/:key', basicAuth, adminUploadNamespacesController.updateNamespace);
-router.delete('/:key', basicAuth, adminUploadNamespacesController.deleteNamespace);
+router.get('/', adminSessionAuth, adminUploadNamespacesController.listNamespaces);
+router.get('/summary', adminSessionAuth, adminUploadNamespacesController.getNamespacesSummary);
+router.get('/:key', adminSessionAuth, adminUploadNamespacesController.getNamespace);
+router.post('/', adminSessionAuth, adminUploadNamespacesController.createNamespace);
+router.put('/:key', adminSessionAuth, adminUploadNamespacesController.updateNamespace);
+router.delete('/:key', adminSessionAuth, adminUploadNamespacesController.deleteNamespace);
 
 module.exports = router;

package/src/routes/blogInternal.routes.js

@@ -2,11 +2,11 @@ const express = require('express');
 const router = express.Router();
 
 const controller = require('../controllers/blogInternal.controller');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/blog/automation/run', rateLimiter.limit('blogAiLimiter'), controller.runAutomation);
 router.post('/blog/publish-scheduled/run', controller.publishScheduled);

package/src/routes/experiments.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 const controller = require('../controllers/experiments.controller');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get(
   '/:code/assignment',

package/src/routes/formsAdmin.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const formsController = require('../controllers/forms.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/', basicAuth, asyncHandler(formsController.adminList));
-router.delete('/:id', basicAuth, asyncHandler(formsController.deleteSubmission));
-router.get('/definitions', basicAuth, asyncHandler(formsController.getForms));
-router.post('/definitions', basicAuth, asyncHandler(formsController.saveForm));
-router.delete('/definitions/:id', basicAuth, asyncHandler(formsController.deleteForm));
+router.get('/', adminSessionAuth, asyncHandler(formsController.adminList));
+router.delete('/:id', adminSessionAuth, asyncHandler(formsController.deleteSubmission));
+router.get('/definitions', adminSessionAuth, asyncHandler(formsController.getForms));
+router.post('/definitions', adminSessionAuth, asyncHandler(formsController.saveForm));
+router.delete('/definitions/:id', adminSessionAuth, asyncHandler(formsController.deleteForm));
 
 module.exports = router;

package/src/routes/globalSettings.routes.js

@@ -1,18 +1,18 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const globalSettingsController = require('../controllers/globalSettings.controller');
 
 // Public route (no auth)
 router.get('/public', globalSettingsController.getPublicSettings);
 
-// Protected routes (Basic Auth)
-router.get('/', basicAuth, globalSettingsController.getAllSettings);
+// Protected routes (Session Auth)
+router.get('/', adminSessionAuth, globalSettingsController.getAllSettings);
 // more specific path before :key catch-all
-router.get('/:key/reveal', basicAuth, globalSettingsController.revealSetting);
-router.get('/:key', basicAuth, globalSettingsController.getSetting);
-router.put('/:key', basicAuth, globalSettingsController.updateSetting);
-router.post('/', basicAuth, globalSettingsController.createSetting);
-router.delete('/:key', basicAuth, globalSettingsController.deleteSetting);
+router.get('/:key/reveal', adminSessionAuth, globalSettingsController.revealSetting);
+router.get('/:key', adminSessionAuth, globalSettingsController.getSetting);
+router.put('/:key', adminSessionAuth, globalSettingsController.updateSetting);
+router.post('/', adminSessionAuth, globalSettingsController.createSetting);
+router.delete('/:key', adminSessionAuth, globalSettingsController.deleteSetting);
 
 module.exports = router;

package/src/routes/internalExperiments.routes.js

@@ -1,13 +1,13 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const rateLimiter = require('../services/rateLimiter.service');
 
 const controller = require('../controllers/internalExperiments.controller');
 
 router.use(express.json({ limit: '1mb' }));
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.post('/experiments/aggregate/run', rateLimiter.limit('experimentsInternalAggLimiter'), controller.runAggregation);
 router.post('/experiments/retention/run', rateLimiter.limit('experimentsInternalRetentionLimiter'), controller.runRetention);

package/src/routes/markdowns.routes.js

@@ -0,0 +1,16 @@
+const express = require('express');
+const router = express.Router();
+
+const markdownsController = require('../controllers/markdowns.controller');
+
+// JSON versions (more specific first)
+router.get('/:category/:group_code/:slug/json', markdownsController.getByPath);
+router.get('/:category/:slug/json', markdownsController.getByPath);
+
+// Raw versions
+router.get('/:category/:group_code/:slug', markdownsController.getByPath);
+router.get('/:category/:slug', markdownsController.getByPath); // No group_code
+
+router.get('/search', markdownsController.search);
+
+module.exports = router;

package/src/routes/notificationAdmin.routes.js

@@ -1,15 +1,15 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const notificationAdminController = require('../controllers/notificationAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/stats', basicAuth, asyncHandler(notificationAdminController.getNotificationStats));
-router.get('/', basicAuth, asyncHandler(notificationAdminController.listNotifications));
-router.post('/send', basicAuth, asyncHandler(notificationAdminController.sendNotification));
-router.post('/broadcast', basicAuth, asyncHandler(notificationAdminController.broadcastNotification));
-router.delete('/:id', basicAuth, asyncHandler(notificationAdminController.deleteNotification));
-router.post('/:id/retry-email', basicAuth, asyncHandler(notificationAdminController.retryEmailNotification));
+router.get('/stats', adminSessionAuth, asyncHandler(notificationAdminController.getNotificationStats));
+router.get('/', adminSessionAuth, asyncHandler(notificationAdminController.listNotifications));
+router.post('/send', adminSessionAuth, asyncHandler(notificationAdminController.sendNotification));
+router.post('/broadcast', adminSessionAuth, asyncHandler(notificationAdminController.broadcastNotification));
+router.delete('/:id', adminSessionAuth, asyncHandler(notificationAdminController.deleteNotification));
+router.post('/:id/retry-email', adminSessionAuth, asyncHandler(notificationAdminController.retryEmailNotification));
 
 module.exports = router;

package/src/routes/orgAdmin.routes.js

@@ -1,26 +1,26 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const orgAdminController = require('../controllers/orgAdmin.controller');
 const asyncHandler = require('../utils/asyncHandler');
 
-router.get('/', basicAuth, asyncHandler(orgAdminController.listOrgs));
-router.post('/', basicAuth, asyncHandler(orgAdminController.createOrganization));
-router.get('/:orgId', basicAuth, asyncHandler(orgAdminController.getOrg));
-router.put('/:orgId', basicAuth, asyncHandler(orgAdminController.updateOrganization));
-router.patch('/:orgId/disable', basicAuth, asyncHandler(orgAdminController.disableOrganization));
-router.patch('/:orgId/enable', basicAuth, asyncHandler(orgAdminController.enableOrganization));
-router.delete('/:orgId', basicAuth, asyncHandler(orgAdminController.deleteOrganization));
+router.get('/', adminSessionAuth, asyncHandler(orgAdminController.listOrgs));
+router.post('/', adminSessionAuth, asyncHandler(orgAdminController.createOrganization));
+router.get('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.getOrg));
+router.put('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.updateOrganization));
+router.patch('/:orgId/disable', adminSessionAuth, asyncHandler(orgAdminController.disableOrganization));
+router.patch('/:orgId/enable', adminSessionAuth, asyncHandler(orgAdminController.enableOrganization));
+router.delete('/:orgId', adminSessionAuth, asyncHandler(orgAdminController.deleteOrganization));
 
-router.get('/:orgId/members', basicAuth, asyncHandler(orgAdminController.listMembers));
-router.post('/:orgId/members', basicAuth, asyncHandler(orgAdminController.addMember));
-router.patch('/:orgId/members/:memberId', basicAuth, asyncHandler(orgAdminController.updateMember));
-router.delete('/:orgId/members/:memberId', basicAuth, asyncHandler(orgAdminController.removeMember));
+router.get('/:orgId/members', adminSessionAuth, asyncHandler(orgAdminController.listMembers));
+router.post('/:orgId/members', adminSessionAuth, asyncHandler(orgAdminController.addMember));
+router.patch('/:orgId/members/:memberId', adminSessionAuth, asyncHandler(orgAdminController.updateMember));
+router.delete('/:orgId/members/:memberId', adminSessionAuth, asyncHandler(orgAdminController.removeMember));
 
-router.get('/:orgId/invites', basicAuth, asyncHandler(orgAdminController.listInvites));
-router.post('/:orgId/invites', basicAuth, asyncHandler(orgAdminController.createInvite));
-router.delete('/:orgId/invites/:inviteId', basicAuth, asyncHandler(orgAdminController.revokeInvite));
-router.post('/:orgId/invites/:inviteId/resend', basicAuth, asyncHandler(orgAdminController.resendInvite));
+router.get('/:orgId/invites', adminSessionAuth, asyncHandler(orgAdminController.listInvites));
+router.post('/:orgId/invites', adminSessionAuth, asyncHandler(orgAdminController.createInvite));
+router.delete('/:orgId/invites/:inviteId', adminSessionAuth, asyncHandler(orgAdminController.revokeInvite));
+router.post('/:orgId/invites/:inviteId/resend', adminSessionAuth, asyncHandler(orgAdminController.resendInvite));
 
 module.exports = router;

package/src/routes/pages.routes.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const router = express.Router();
 const pagesService = require('../services/pages.service');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
 router.get('*', async (req, res, next) => {
   try {
@@ -14,11 +14,11 @@ router.get('*', async (req, res, next) => {
 
     if (draft) {
       let nextCalled = false;
-      basicAuth(req, res, () => {
+      adminSessionAuth(req, res, () => {
         nextCalled = true;
       });
 
-      // If basicAuth did not call next(), it likely ended the response.
+      // If adminSessionAuth did not call next(), it likely ended the response.
       if (!nextCalled) {
         return;
       }

package/src/routes/registry.routes.js

@@ -0,0 +1,11 @@
+const express = require('express');
+
+const controller = require('../controllers/registry.controller');
+const rateLimiter = require('../services/rateLimiter.service');
+
+const router = express.Router();
+
+router.get('/:id/auth', rateLimiter.limit('openRegistryAuthLimiter'), controller.auth);
+router.get('/:id/list', rateLimiter.limit('openRegistryListLimiter'), controller.list);
+
+module.exports = router;