**Three Public Features:** - Media Inquiry System: Press/media can submit inquiries with AI triage (Phase 2) - Case Study Submissions: Community can submit real-world AI safety failures - Blog Curation: Admin-only topic suggestions with AI assistance (Phase 2) **Backend Implementation:** - Media routes/controller: /api/media/inquiries endpoints - Cases routes/controller: /api/cases/submit endpoints - Blog routes/controller: Already existed, documented - Human oversight: All submissions go to moderation queue - Tractatus boundaries: BoundaryEnforcer integration in blog controller **Frontend Forms:** - /media-inquiry.html: Public submission form for press/media - /case-submission.html: Public submission form for case studies - Full validation, error handling, success messages **Validation Middleware Updates:** - Support nested field validation (contact.email, submitter.name) - validateEmail(fieldPath) now parameterized - validateRequired() supports dot-notation paths **Phase 1 Status:** - AI triage: Manual (Phase 2 will add Claude API integration) - All submissions require human review and approval - Moderation queue operational - Admin dashboard endpoints ready **Files Added:** - public/media-inquiry.html - public/case-submission.html - src/controllers/media.controller.js - src/controllers/cases.controller.js - src/routes/media.routes.js - src/routes/cases.routes.js **Files Modified:** - src/routes/index.js (registered new routes) - src/routes/auth.routes.js (updated validateEmail call) - src/middleware/validation.middleware.js (nested field support) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
41 lines
944 B
JavaScript
41 lines
944 B
JavaScript
/**
|
|
* Authentication Routes
|
|
*/
|
|
|
|
const express = require('express');
|
|
const router = express.Router();
|
|
|
|
const authController = require('../controllers/auth.controller');
|
|
const { authenticateToken } = require('../middleware/auth.middleware');
|
|
const { validateEmail, validateRequired } = require('../middleware/validation.middleware');
|
|
const { asyncHandler } = require('../middleware/error.middleware');
|
|
|
|
/**
|
|
* POST /api/auth/login
|
|
* Login with email and password
|
|
*/
|
|
router.post('/login',
|
|
validateRequired(['email', 'password']),
|
|
validateEmail('email'),
|
|
asyncHandler(authController.login)
|
|
);
|
|
|
|
/**
|
|
* GET /api/auth/me
|
|
* Get current authenticated user
|
|
*/
|
|
router.get('/me',
|
|
authenticateToken,
|
|
asyncHandler(authController.getCurrentUser)
|
|
);
|
|
|
|
/**
|
|
* POST /api/auth/logout
|
|
* Logout (logs the event, client removes token)
|
|
*/
|
|
router.post('/logout',
|
|
authenticateToken,
|
|
asyncHandler(authController.logout)
|
|
);
|
|
|
|
module.exports = router;
|