1

server-node/src/routes/customWorldAgent.ts

@@ -9,6 +9,7 @@ import type {
 import type { AppContext } from '../context.js';
 import { badRequest, notFound } from '../errors.js';
 import { asyncHandler, prepareApiResponse, sendApiResponse } from '../http.js';
+import { requireJwtAuth } from '../middleware/auth.js';
 import { routeMeta } from '../middleware/routeMeta.js';
 
 const createSessionSchema = z.object({
@@ -98,6 +99,9 @@ function readParam(param: string | string[] | undefined) {
 
 export function createCustomWorldAgentRoutes(context: AppContext) {
   const router = Router();
+  const requireAuth = requireJwtAuth(context.config, context.userRepository);
+
+  router.use(requireAuth);
 
   router.post(
     '/sessions',