alpha

backend/server.js

@@ -16,6 +16,7 @@ const logger = require("./utils/logger");
 const morgan = require("morgan");
 
 const authRoutes = require("./routes/auth");
+const { router: alphaRoutes } = require("./routes/alpha");
 const userRoutes = require("./routes/users");
 const itemRoutes = require("./routes/items");
 const rentalRoutes = require("./routes/rentals");
@@ -41,6 +42,7 @@ const {
 const { generalLimiter } = require("./middleware/rateLimiter");
 const errorLogger = require("./middleware/errorLogger");
 const apiLogger = require("./middleware/apiLogger");
+const { requireAlphaAccess } = require("./middleware/alphaAccess");
 
 // Apply security middleware
 app.use(enforceHTTPS);
@@ -106,20 +108,25 @@ app.use(
 // Serve static files from uploads directory
 app.use("/uploads", express.static(path.join(__dirname, "uploads")));
 
-app.use("/api/auth", authRoutes);
-app.use("/api/users", userRoutes);
-app.use("/api/items", itemRoutes);
-app.use("/api/rentals", rentalRoutes);
-app.use("/api/messages", messageRoutes);
-app.use("/api/item-requests", itemRequestRoutes);
-app.use("/api/stripe", stripeRoutes);
-app.use("/api/maps", mapsRoutes);
-app.use("/api/condition-checks", conditionCheckRoutes);
+// Public routes (no alpha access required)
+app.use("/api/alpha", alphaRoutes);
+app.use("/api/auth", authRoutes); // Auth has its own alpha checks in registration
 
+// Health check endpoint
 app.get("/", (req, res) => {
   res.json({ message: "CommunityRentals.App API is running!" });
 });
 
+// Protected routes (require alpha access)
+app.use("/api/users", requireAlphaAccess, userRoutes);
+app.use("/api/items", requireAlphaAccess, itemRoutes);
+app.use("/api/rentals", requireAlphaAccess, rentalRoutes);
+app.use("/api/messages", requireAlphaAccess, messageRoutes);
+app.use("/api/item-requests", requireAlphaAccess, itemRequestRoutes);
+app.use("/api/stripe", requireAlphaAccess, stripeRoutes);
+app.use("/api/maps", requireAlphaAccess, mapsRoutes);
+app.use("/api/condition-checks", requireAlphaAccess, conditionCheckRoutes);
+
 // Error handling middleware (must be last)
 app.use(errorLogger);
 app.use(sanitizeError);