Describe the bug
Currently, the API is exposes to the public with no authentication check. It is best practice to secure the API with the NextAuth token obtained from the client side.
Expected behavior
API need to be secured as described in: https://next-auth.js.org/tutorials/securing-pages-and-api-routes
Describe the bug
Currently, the API is exposes to the public with no authentication check. It is best practice to secure the API with the NextAuth token obtained from the client side.
Expected behavior
API need to be secured as described in: https://next-auth.js.org/tutorials/securing-pages-and-api-routes