server and web app

2026-05-31 23:08:53 -04:00
parent 438b3b29a2
commit b3364447a1
24 changed files with 2318 additions and 153 deletions
--- a/apps/server/internal/httpserver/middleware.go
+++ b/apps/server/internal/httpserver/middleware.go
@@ -127,6 +127,12 @@ func requiredScopeForPath(r *http.Request) (auth.Scope, bool) {
 		return auth.ScopeSyncRead, true
 	case strings.HasPrefix(path, "/api/content/"):
 		return auth.ScopeSyncRead, true
+	case strings.HasPrefix(path, "/api/comments"):
+		return auth.ScopeDocsRead, true
+	case strings.HasPrefix(path, "/api/notifications"):
+		return auth.ScopeDocsRead, true
+	case strings.HasPrefix(path, "/api/watch"):
+		return auth.ScopeDocsRead, true
 	case strings.HasSuffix(path, "/edit"):
 		return auth.ScopeDocsWrite, true
 	default: