From 8d0565b2a65c2d739bdc27871bd50fd085ec5b6c Mon Sep 17 00:00:00 2001
From: h1divp <71522316+h1divp@users.noreply.github.com>
Date: Tue, 7 Oct 2025 17:45:00 -0400
Subject: [PATCH] hotfix: fixed sideeffect

---
 apps/api/internal/api/api.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/api/internal/api/api.go b/apps/api/internal/api/api.go
index 5dcf3d28..a4f97014 100644
--- a/apps/api/internal/api/api.go
+++ b/apps/api/internal/api/api.go
@@ -119,9 +119,11 @@ func (api *API) setupRoutes(mw *mw.Middleware) {
 		// Event-specific routes
 		r.Route("/{eventId}", func(r chi.Router) {
 
+			r.Post("/interest", api.Handlers.EventInterest.AddEmailToEvent)
+
 			// General access
+			r.Use(mw.Auth.RequireAuth) // routes below this are protected
 			r.Get("/", api.Handlers.Event.GetEventByID)
-			r.Post("/interest", api.Handlers.EventInterest.AddEmailToEvent)
 			r.Get("/role", api.Handlers.Event.GetEventRole)
 
 			// Admin-only