add auth

src/app/api/game-cover/route.ts

@@ -3,6 +3,7 @@ import fs from 'fs'
 import sharp from 'sharp'
 import { NextRequest, NextResponse } from 'next/server'
 import { getLibrary, resolveLibraryRoot, resolveAndJail } from '@/lib/libraries'
+import { requireAdmin } from '@/lib/auth'
 
 const MAX_COVER_BYTES = 10 * 1024 * 1024 // 10 MB
 
@@ -13,6 +14,9 @@ function isCoverType(s: string | null): s is CoverType {
 }
 
 export async function POST(request: NextRequest) {
+  const auth = await requireAdmin(request)
+  if (auth instanceof NextResponse) return auth
+
   const { searchParams } = request.nextUrl
   const libraryId = searchParams.get('libraryId')
   const itemId = searchParams.get('itemId')