code: power,nextjs,frontends (2 files)

frontends/nextjs/src/app/api/power-transfers/handlers/get-power-transfers.ts

@@ -1,7 +1,13 @@
 import { NextResponse } from 'next/server'
+import type { NextRequest } from 'next/server'
 import { getPowerTransferRequests } from '@/lib/db/power-transfers'
+import { requireDBALApiKey } from '@/lib/api/require-dbal-api-key'
 
-export async function GET() {
+export async function GET(request: NextRequest) {
+  const unauthorized = requireDBALApiKey(request)
+  if (unauthorized) {
+    return unauthorized
+  }
   try {
     const requests = await getPowerTransferRequests()
     const sorted = [...requests].sort((a, b) => b.createdAt - a.createdAt)

frontends/nextjs/src/app/api/power-transfers/handlers/post-power-transfer.ts

@@ -2,6 +2,7 @@ import { randomUUID } from 'crypto'
 import { NextResponse } from 'next/server'
 import type { NextRequest } from 'next/server'
 import { readJson } from '@/lib/api/read-json'
+import { requireDBALApiKey } from '@/lib/api/require-dbal-api-key'
 import { Database } from '@/lib/database'
 import {
   addPowerTransferRequest,
@@ -18,6 +19,11 @@ interface CreatePowerTransferPayload {
 }
 
 export async function POST(request: NextRequest) {
+  const unauthorized = requireDBALApiKey(request)
+  if (unauthorized) {
+    return unauthorized
+  }
+
   try {
     const body = await readJson<CreatePowerTransferPayload>(request)
     if (!body) {