revoked access to website for coaches, added web-specific tokens

2026-05-26 15:49:19 +02:00
parent 7671c9f329
commit 2181d1731e
36 changed files with 129 additions and 41 deletions
--- a/api/users.php
+++ b/api/users.php
@ -4,8 +4,7 @@ require_once __DIR__ . '/../db_init.php';

 header('Content-Type: application/json; charset=UTF-8');

-$tokenRec       = require_valid_token();
-require_role(['admin', 'supervisor'], $tokenRec);
+$tokenRec = require_valid_token_web();

 $callerRole     = $tokenRec['role'];
 $callerEntityID = $tokenRec['entityID'] ?? '';