From 3cdee89c961ae9c836234f5aec87174a04a800a8 Mon Sep 17 00:00:00 2001
From: Brian Picciano <mediocregopher@gmail.com>
Date: Fri, 20 May 2022 11:20:02 -0600
Subject: [PATCH] Put post preview behind auth

---
 srv/src/http/api.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/srv/src/http/api.go b/srv/src/http/api.go
index bbf4419..4740853 100644
--- a/srv/src/http/api.go
+++ b/srv/src/http/api.go
@@ -222,7 +222,9 @@ func (a *api) handler() http.Handler {
 				"DELETE": authMiddleware(auther,
 					formMiddleware(a.deletePostHandler()),
 				),
-				"PREVIEW": formMiddleware(a.previewPostHandler()),
+				"PREVIEW": authMiddleware(auther,
+					formMiddleware(a.previewPostHandler()),
+				),
 			}),
 		))
 		v2Mux.Handle("/assets/", http.StripPrefix("/assets",