Fix inconsistent auth guard usage across API routes

[nisshchayarathi]

Summary
Some routes may rely on UI gating instead of server-side auth checks. Audit and ensure server-side enforcement.

Acceptance criteria

• Audit app/api/** for missing requireAuth.
• Add auth guard to user-specific routes.
• Add tests or a small checklist note in docs.

[sansitachaudhury]

Hi @nisshchayarathi ,

I would love to take on this issue! Since I just worked on securing the repository endpoints so I am familiar with the requireAuth pattern used in the codebase.

Could you please assign this to me?
Thank you

[tmdeveloper007]

Closing as stale - this issue has been open for more than 2 days with no linked pull request and no recent activity. If this is still needed, please reopen with a clear implementation plan.

[sansitachaudhury]

Hi @tmdeveloper007, I had linked pull request #1679 for this issue.
Thank you

[tmdeveloper007]

Closing this issue as it has been open for 36 days without a linked PR or assignee. If this is still needed, please reopen with a PR or assign a maintainer.

[github-actions]

👋 Hey @tmdeveloper007! Looks like you want to work on this issue — awesome! 🎉

We don't assign issues through comments like this. Here's how our system works:

🤖 How to Get Assigned

Comment /assign on this issue and our bot will automatically assign it to you (if you're eligible).

/assign

📋 A Few Things to Know

• You can hold a maximum of 1 open issue at a time — finish your current one before picking another.
• You can be assigned up to 4 issues per day.
• If there's no activity for 7 days, the assignment will automatically expire so others can pick it up.
• Make sure to read our CONTRIBUTING.md before you start — it covers code style, commit conventions, and the PR checklist.

Happy contributing! 🚀

GSSoC'26 · GitVerse

[tmdeveloper007]

This issue has been open for over 40 days with no linked PR and no assignee. It appears to be a backlog item that has not been prioritized. If this is still relevant, please reopen with a clear scope and assign it. Closing as stale to keep the issue tracker actionable.