security: implement AUTH_SECRET and secure map/exif API routes

2026-03-07 08:18:23 +01:00
parent 2a16a9386f
commit e394fe84a0
14 changed files with 849 additions and 793 deletions
--- a/app/api/exif/[id]/route.ts
+++ b/app/api/exif/[id]/route.ts
@@ -24,15 +24,22 @@ export async function GET(_request: Request, { params }: { params: Promise<{ id:
  }

  const exif = asset.exifInfo;
-  return NextResponse.json({
-    make: exif.make,
-    model: exif.model,
-    lensModel: exif.lensModel,
-    focalLength: exif.focalLength,
-    fNumber: exif.fNumber,
-    exposureTime: exif.exposureTime,
-    iso: exif.iso,
-    city: exif.city,
-    country: exif.country,
-  });
+  return NextResponse.json(
+    {
+      make: exif.make,
+      model: exif.model,
+      lensModel: exif.lensModel,
+      focalLength: exif.focalLength,
+      fNumber: exif.fNumber,
+      exposureTime: exif.exposureTime,
+      iso: exif.iso,
+      city: exif.city,
+      country: exif.country,
+    },
+    {
+      headers: {
+        'Cache-Control': 'private, max-age=86400, stale-while-revalidate=3600',
+      },
+    },
+  );
 }