From 10ac1a6076867b0a3aa180fe61fab701bf1abb17 Mon Sep 17 00:00:00 2001
From: Blitblank <pmcgeee03@gmail.com>
Date: Sun, 22 Mar 2026 01:21:04 -0500
Subject: [PATCH] fix: require authorization for items list

---
 api/src/Controllers/ItemsController.cs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/src/Controllers/ItemsController.cs b/api/src/Controllers/ItemsController.cs
index 79a3067..65cb0ad 100644
--- a/api/src/Controllers/ItemsController.cs
+++ b/api/src/Controllers/ItemsController.cs
@@ -15,13 +15,13 @@ public class ItemsController : ControllerBase {
         service_ = service;
     }
 
-    [AllowAnonymous] // accessible if not authorized
+    [[Authorize]]
     [HttpGet]
     public async Task<ActionResult<List<Item>>> getItems() {
         return Ok(await service_.GetAll());
     }
 
-    [AllowAnonymous]
+    [[Authorize]]
     [HttpGet("{id:int}")]
     public async Task<ActionResult<Item>> getItem(int id) {