@intranefr/superbackend 1.5.3 → 1.6.4

package/src/models/GlobalSetting.js

@@ -8,7 +8,17 @@ const globalSettingSchema = new mongoose.Schema({
   },
   value: {
     type: String,
-    required: true
+    default: '',
+    validate: {
+      validator: function(v) {
+        // Only encrypted values cannot be empty
+        if (this.type === 'encrypted') {
+          return v && v.trim().length > 0;
+        }
+        return true; // Allow any value (including empty) for other types
+      },
+      message: 'Encrypted values cannot be empty'
+    }
   },
   type: {
     type: String,

package/src/models/UiComponent.js

@@ -20,6 +20,8 @@ const uiComponentSchema = new mongoose.Schema(
     api: { type: mongoose.Schema.Types.Mixed, default: null },
     usageMarkdown: { type: String, default: '' },
 
+    previewExample: { type: String, default: null },
+
     version: { type: Number, default: 1 },
     isActive: { type: Boolean, default: true, index: true },
   },

package/src/models/User.js

@@ -56,7 +56,7 @@ const userSchema = new mongoose.Schema({
   },
   role: {
     type: String,
-    enum: ['user', 'admin'],
+    enum: ['user', 'admin', 'superadmin', 'limited-admin', 'content-manager', 'developer'],
     default: 'user'
   }
 }, {

package/src/routes/admin.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 const adminController = require('../controllers/admin.controller');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
-// All admin routes protected by basic auth
-router.use(basicAuth);
+// All admin routes protected by session auth
+router.use(adminSessionAuth);
 
 router.get('/users', adminController.getUsers);
 router.post('/users/register', adminController.registerUser);

package/src/routes/adminAgents.routes.js

@@ -1,9 +1,9 @@
 const express = require('express');
 const router = express.Router();
 const adminAgentsController = require('../controllers/adminAgents.controller');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/', adminAgentsController.listAgents);
 router.post('/', adminAgentsController.createAgent);

package/src/routes/adminAssets.routes.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const router = express.Router();
 const multer = require('multer');
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminAssetsController = require('../controllers/adminAssets.controller');
 const { auditMiddleware } = require('../services/auditLogger');
 
@@ -14,15 +14,15 @@ const upload = multer({
   }
 });
 
-router.get('/info', basicAuth, adminAssetsController.getStorageInfo);
-router.use('/storage', basicAuth, adminAssetsStorageRoutes);
-router.get('/', basicAuth, adminAssetsController.list);
-router.get('/:id', basicAuth, adminAssetsController.get);
-router.post('/bulk/move-namespace', basicAuth, auditMiddleware('admin.assets.bulk.moveNamespace', { entityType: 'Asset' }), adminAssetsController.bulkMoveNamespace);
-router.post('/bulk/set-tags', basicAuth, auditMiddleware('admin.assets.bulk.setTags', { entityType: 'Asset' }), adminAssetsController.bulkSetTags);
-router.post('/upload', basicAuth, upload.single('file'), adminAssetsController.upload);
-router.post('/:id/replace', basicAuth, upload.single('file'), adminAssetsController.replace);
-router.patch('/:id', basicAuth, adminAssetsController.update);
-router.delete('/:id', basicAuth, adminAssetsController.delete);
+router.get('/info', adminSessionAuth, adminAssetsController.getStorageInfo);
+router.use('/storage', adminSessionAuth, adminAssetsStorageRoutes);
+router.get('/', adminSessionAuth, adminAssetsController.list);
+router.get('/:id', adminSessionAuth, adminAssetsController.get);
+router.post('/bulk/move-namespace', adminSessionAuth, auditMiddleware('admin.assets.bulk.moveNamespace', { entityType: 'Asset' }), adminAssetsController.bulkMoveNamespace);
+router.post('/bulk/set-tags', adminSessionAuth, auditMiddleware('admin.assets.bulk.setTags', { entityType: 'Asset' }), adminAssetsController.bulkSetTags);
+router.post('/upload', adminSessionAuth, upload.single('file'), adminAssetsController.upload);
+router.post('/:id/replace', adminSessionAuth, upload.single('file'), adminAssetsController.replace);
+router.patch('/:id', adminSessionAuth, adminAssetsController.update);
+router.delete('/:id', adminSessionAuth, adminAssetsController.delete);
 
 module.exports = router;

package/src/routes/adminBlog.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/blogAdmin.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 router.use(express.json({ limit: '2mb' }));
 
 router.get('/blog-posts', controller.list);

package/src/routes/adminBlogAi.routes.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/blogAiAdmin.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 router.use(express.json({ limit: '2mb' }));
 
 router.post('/blog-ai/generate-field', rateLimiter.limit('blogAiLimiter'), controller.generateField);

package/src/routes/adminBlogAutomation.routes.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/blogAutomationAdmin.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 router.use(express.json({ limit: '2mb' }));
 
 router.get('/blog-automation/config', controller.getConfig);

package/src/routes/adminCache.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminCache.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/config', controller.getConfig);
 router.put('/config', controller.updateConfig);

package/src/routes/adminConsoleManager.routes.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const ConsoleEntry = require('../models/ConsoleEntry');
 const ConsoleLog = require('../models/ConsoleLog');
 const GlobalSetting = require('../models/GlobalSetting');
@@ -21,7 +21,7 @@ function toInt(val, fallback) {
   return Number.isFinite(n) ? n : fallback;
 }
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/config', async (req, res) => {
   try {

package/src/routes/adminCrons.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminCrons.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/', controller.listCronJobs);
 router.post('/', controller.createCronJob);

package/src/routes/adminDataCleanup.routes.js

@@ -0,0 +1,26 @@
+const express = require('express');
+const router = express.Router();
+
+const { adminSessionAuth } = require('../middleware/auth');
+const { auditMiddleware } = require('../services/auditLogger');
+const controller = require('../controllers/adminDataCleanup.controller');
+
+router.use(adminSessionAuth);
+
+router.get('/overview', controller.getOverview);
+
+router.post(
+  '/dry-run',
+  auditMiddleware('admin.data_cleanup.dry_run', { entityType: 'DataCleanup' }),
+  controller.dryRun,
+);
+
+router.post(
+  '/execute',
+  auditMiddleware('admin.data_cleanup.execute', { entityType: 'DataCleanup' }),
+  controller.execute,
+);
+
+router.get('/infer-fields', controller.inferFields);
+
+module.exports = router;

package/src/routes/adminDbBrowser.routes.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const { auditMiddleware } = require('../services/auditLogger');
 const controller = require('../controllers/adminDbBrowser.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 // Connection profiles
 router.get('/connections', controller.listConnections);

package/src/routes/adminEjsVirtual.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminEjsVirtual.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/files', controller.list);
 router.get('/file', controller.getFile);

package/src/routes/adminFeatureFlags.routes.js

@@ -1,12 +1,12 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminFeatureFlagsController = require('../controllers/adminFeatureFlags.controller');
 
-router.get('/', basicAuth, adminFeatureFlagsController.listFlags);
-router.get('/:key', basicAuth, adminFeatureFlagsController.getFlag);
-router.post('/', basicAuth, adminFeatureFlagsController.createFlag);
-router.put('/:key', basicAuth, adminFeatureFlagsController.updateFlag);
-router.delete('/:key', basicAuth, adminFeatureFlagsController.deleteFlag);
+router.get('/', adminSessionAuth, adminFeatureFlagsController.listFlags);
+router.get('/:key', adminSessionAuth, adminFeatureFlagsController.getFlag);
+router.post('/', adminSessionAuth, adminFeatureFlagsController.createFlag);
+router.put('/:key', adminSessionAuth, adminFeatureFlagsController.updateFlag);
+router.delete('/:key', adminSessionAuth, adminFeatureFlagsController.deleteFlag);
 
 module.exports = router;

package/src/routes/adminHeadless.routes.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminHeadlessController = require('../controllers/adminHeadless.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 // Models
 router.get('/models', adminHeadlessController.listModels);

package/src/routes/adminHealthChecks.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminHealthChecks.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/config', controller.getConfig);
 router.put('/config', controller.updateConfig);

package/src/routes/adminI18n.routes.js

@@ -1,11 +1,11 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
 const adminI18nController = require('../controllers/adminI18n.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/locales', adminI18nController.listLocales);
 router.post('/locales', adminI18nController.createLocale);

package/src/routes/adminJsonConfigs.routes.js

@@ -1,15 +1,15 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
 const adminJsonConfigsController = require('../controllers/adminJsonConfigs.controller');
 
-router.get('/', basicAuth, adminJsonConfigsController.list);
-router.get('/:id', basicAuth, adminJsonConfigsController.get);
-router.post('/', basicAuth, adminJsonConfigsController.create);
-router.put('/:id', basicAuth, adminJsonConfigsController.update);
-router.post('/:id/regenerate-slug', basicAuth, adminJsonConfigsController.regenerateSlug);
-router.post('/:id/clear-cache', basicAuth, adminJsonConfigsController.clearCache);
-router.delete('/:id', basicAuth, adminJsonConfigsController.remove);
+router.get('/', adminSessionAuth, adminJsonConfigsController.list);
+router.get('/:id', adminSessionAuth, adminJsonConfigsController.get);
+router.post('/', adminSessionAuth, adminJsonConfigsController.create);
+router.put('/:id', adminSessionAuth, adminJsonConfigsController.update);
+router.post('/:id/regenerate-slug', adminSessionAuth, adminJsonConfigsController.regenerateSlug);
+router.post('/:id/clear-cache', adminSessionAuth, adminJsonConfigsController.clearCache);
+router.delete('/:id', adminSessionAuth, adminJsonConfigsController.remove);
 
 module.exports = router;

package/src/routes/adminLlm.routes.js

@@ -1,15 +1,15 @@
 const express = require("express");
 const router = express.Router();
-const { basicAuth } = require("../middleware/auth");
+const { adminSessionAuth } = require("../middleware/auth");
 const adminLlmController = require("../controllers/adminLlm.controller");
 const rateLimiter = require("../services/rateLimiter.service");
 
-router.get("/config", basicAuth, adminLlmController.getConfig);
-router.get("/providers", basicAuth, adminLlmController.listProviders);
-router.post("/config", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.saveConfig);
-router.get("/openrouter/models", basicAuth, adminLlmController.listOpenRouterModels);
-router.post("/prompts/:key/test", basicAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.testPrompt);
-router.get("/audit", basicAuth, adminLlmController.listAudit);
-router.get("/costs", basicAuth, adminLlmController.listCosts);
+router.get("/config", adminSessionAuth, adminLlmController.getConfig);
+router.get("/providers", adminSessionAuth, adminLlmController.listProviders);
+router.post("/config", adminSessionAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.saveConfig);
+router.get("/openrouter/models", adminSessionAuth, adminLlmController.listOpenRouterModels);
+router.post("/prompts/:key/test", adminSessionAuth, rateLimiter.limit("llmConfigLimiter"), adminLlmController.testPrompt);
+router.get("/audit", adminSessionAuth, adminLlmController.listAudit);
+router.get("/costs", adminSessionAuth, adminLlmController.listCosts);
 
 module.exports = router;

package/src/routes/adminLogin.routes.js

@@ -0,0 +1,23 @@
+const express = require('express');
+const router = express.Router();
+const adminLoginController = require('../controllers/adminLogin.controller');
+const { auditMiddleware } = require('../services/auditLogger');
+
+/**
+ * Admin Login Routes
+ * Handles both basic auth and IAM authentication through a unified login form
+ */
+
+// Serve login page
+router.get('/login', auditMiddleware('admin.login.view', { entityType: 'AdminSession' }), adminLoginController.getLogin);
+
+// Process login (supports both basic auth and IAM)
+router.post('/login', auditMiddleware('admin.login.attempt', { entityType: 'AdminSession' }), adminLoginController.postLogin);
+
+// Logout and clear session
+router.post('/logout', auditMiddleware('admin.logout', { entityType: 'AdminSession' }), adminLoginController.postLogout);
+
+// API endpoint to check authentication status
+router.get('/auth-status', adminLoginController.getAuthStatus);
+
+module.exports = router;

package/src/routes/adminMarkdowns.routes.js

@@ -1,16 +1,10 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 
 const adminMarkdownsController = require('../controllers/adminMarkdowns.controller');
 
-router.get('/', basicAuth, adminMarkdownsController.list);
-router.get('/group-codes/:category', basicAuth, adminMarkdownsController.getGroupCodes);
-router.get('/folder/:category/:group_code?', basicAuth, adminMarkdownsController.getFolderContents);
-router.get('/:id', basicAuth, adminMarkdownsController.get);
-router.post('/', basicAuth, adminMarkdownsController.create);
-router.put('/:id', basicAuth, adminMarkdownsController.update);
-router.delete('/:id', basicAuth, adminMarkdownsController.remove);
-router.post('/validate-path', basicAuth, adminMarkdownsController.validatePath);
+router.use(adminSessionAuth);
+router.post('/validate-path', adminSessionAuth, adminMarkdownsController.validatePath);
 
 module.exports = router;

package/src/routes/adminMigration.routes.js

@@ -1,79 +1,79 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const { auditMiddleware } = require('../services/auditLogger');
 
 const adminMigrationController = require('../controllers/adminMigration.controller');
 
 router.get(
   '/environments',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.listEnvironments,
 );
 
 router.get(
   '/environments/:envKey',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.getEnvironment,
 );
 
 router.get(
   '/models',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.listModels,
 );
 
 router.get(
   '/models/:modelName/schema',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.getModelSchema,
 );
 
 router.post(
   '/preview',
-  basicAuth,
+  adminSessionAuth,
   adminMigrationController.preview,
 );
 
 router.post(
   '/environments',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.environments.upsert', { entityType: 'GlobalSetting' }),
   adminMigrationController.upsertEnvironment,
 );
 
 router.delete(
   '/environments/:envKey',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.environments.delete', { entityType: 'GlobalSetting' }),
   adminMigrationController.deleteEnvironment,
 );
 
 router.post(
   '/test-connection',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_connection', { entityType: 'Migration' }),
   adminMigrationController.testConnection,
 );
 
 router.post(
   '/test-assets',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_assets', { entityType: 'Migration' }),
   adminMigrationController.testAssetsTarget,
 );
 
 router.post(
   '/test-assets-copy',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.test_assets_copy', { entityType: 'Migration' }),
   adminMigrationController.testAssetsCopyKey,
 );
 
 router.post(
   '/run',
-  basicAuth,
+  adminSessionAuth,
   auditMiddleware('admin.migration.run', { entityType: 'Migration' }),
   adminMigrationController.runMigration,
 );

package/src/routes/adminPages.routes.js

@@ -1,6 +1,6 @@
 const express = require('express');
 const router = express.Router();
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminPages.controller');
 const adminBlockDefinitionsController = require('../controllers/adminBlockDefinitions.controller');
 const adminBlockDefinitionsAiController = require('../controllers/adminBlockDefinitionsAi.controller');
@@ -8,7 +8,7 @@ const adminContextBlockDefinitionsController = require('../controllers/adminCont
 const adminPagesContextBlocksAiController = require('../controllers/adminPagesContextBlocksAi.controller');
 const rateLimiter = require('../services/rateLimiter.service');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/collections', controller.listCollections);
 router.get('/collections/:id', controller.getCollection);

package/src/routes/adminPlugins.routes.js

@@ -0,0 +1,15 @@
+const express = require('express');
+
+const { adminSessionAuth } = require('../middleware/auth');
+const controller = require('../controllers/adminPlugins.controller');
+
+const router = express.Router();
+
+router.use(adminSessionAuth);
+
+router.get('/', controller.list);
+router.post('/:id/enable', controller.enable);
+router.post('/:id/disable', controller.disable);
+router.post('/:id/install', controller.install);
+
+module.exports = router;

package/src/routes/adminProxy.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminProxy.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/entries', controller.list);
 router.get('/entries/:id', controller.get);

package/src/routes/adminRateLimits.routes.js

@@ -1,17 +1,17 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const adminRateLimitsController = require('../controllers/adminRateLimits.controller');
 
-router.get('/', basicAuth, adminRateLimitsController.list);
-router.get('/config', basicAuth, adminRateLimitsController.getConfig);
-router.put('/config', basicAuth, adminRateLimitsController.updateConfig);
-router.get('/metrics', basicAuth, adminRateLimitsController.getMetrics);
+router.get('/', adminSessionAuth, adminRateLimitsController.list);
+router.get('/config', adminSessionAuth, adminRateLimitsController.getConfig);
+router.put('/config', adminSessionAuth, adminRateLimitsController.updateConfig);
+router.get('/metrics', adminSessionAuth, adminRateLimitsController.getMetrics);
 
-router.post('/bulk-enabled', basicAuth, adminRateLimitsController.bulkEnabled);
+router.post('/bulk-enabled', adminSessionAuth, adminRateLimitsController.bulkEnabled);
 
-router.put('/:id', basicAuth, adminRateLimitsController.updateLimiter);
-router.post('/:id/reset', basicAuth, adminRateLimitsController.resetLimiter);
+router.put('/:id', adminSessionAuth, adminRateLimitsController.updateLimiter);
+router.post('/:id/reset', adminSessionAuth, adminRateLimitsController.resetLimiter);
 
 module.exports = router;

package/src/routes/adminRbac.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminRbac.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/rights', controller.listRights);
 router.get('/users', controller.searchUsers);

package/src/routes/adminRegistry.routes.js

@@ -0,0 +1,24 @@
+const express = require('express');
+
+const { adminSessionAuth } = require('../middleware/auth');
+const controller = require('../controllers/adminRegistry.controller');
+
+const router = express.Router();
+
+router.use(adminSessionAuth);
+
+router.get('/', controller.listRegistries);
+router.post('/', controller.createRegistry);
+router.get('/:id', controller.getRegistry);
+router.put('/:id', controller.updateRegistry);
+router.delete('/:id', controller.deleteRegistry);
+
+router.get('/:id/items', controller.listItems);
+router.post('/:id/items', controller.upsertItem);
+router.put('/:id/items/:itemId', controller.upsertItem);
+router.delete('/:id/items/:itemId', controller.deleteItem);
+
+router.post('/:id/tokens', controller.createToken);
+router.delete('/:id/tokens/:tokenId', controller.deleteToken);
+
+module.exports = router;

package/src/routes/adminScripts.routes.js

@@ -1,10 +1,10 @@
 const express = require('express');
 const router = express.Router();
 
-const { basicAuth } = require('../middleware/auth');
+const { adminSessionAuth } = require('../middleware/auth');
 const controller = require('../controllers/adminScripts.controller');
 
-router.use(basicAuth);
+router.use(adminSessionAuth);
 
 router.get('/', controller.listScripts);
 router.post('/', controller.createScript);