fix: enable encrypted swarm requests

heicode/router/api-router.go

@@ -61,7 +61,7 @@ func SetApiRouter(router *gin.Engine) {
 		apiRouter.POST("/waffo/webhook", controller.WaffoWebhook)
 		apiRouter.GET("/agnet/callbacks/swarm-events/schema", controller.AgnetGetSwarmEventCallbackSchema)
 		apiRouter.POST("/agnet/callbacks/swarm-events", controller.AgnetReceiveSwarmEventCallback)
-		apiRouter.POST("/swarms", middleware.UserAuth(), controller.AgnetCreateUserSwarm)
+		apiRouter.POST("/swarms", middleware.UserOrV2DeviceAuth(), controller.AgnetCreateUserSwarm)
 		//apiRouter.POST("/waffo-pancake/webhook", controller.WaffoPancakeWebhook)
 
 		// Universal secure verification routes

heicode/router/api_router_test.go

@@ -1,9 +1,12 @@
 package router
 
 import (
+	"net/http"
+	"net/http/httptest"
 	"testing"
 
 	"github.com/gin-gonic/gin"
+	"github.com/heicode/manager/middleware"
 	"github.com/stretchr/testify/require"
 )
 
@@ -13,3 +16,19 @@ func TestSetApiRouterDoesNotRegisterDuplicateRoutes(t *testing.T) {
 		SetApiRouter(gin.New())
 	})
 }
+
+func TestSwarmRouteUsesV2DeviceAuth(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	engine := gin.New()
+	SetApiRouter(engine)
+
+	req := httptest.NewRequest(http.MethodPost, "/api/swarms", nil)
+	req.Header.Set("Content-Encoding", middleware.V2ContentEncoding)
+	rec := httptest.NewRecorder()
+
+	engine.ServeHTTP(rec, req)
+
+	require.Equal(t, http.StatusUnauthorized, rec.Code)
+	require.Equal(t, middleware.V2AuthErrorEphPubkeyMissing, rec.Header().Get(middleware.HeaderAuthError))
+	require.NotEmpty(t, rec.Header().Get(middleware.HeaderServerTime))
+}