From 4edbdc94e5e6835ff75379a688238069420c7af0 Mon Sep 17 00:00:00 2001
From: ht <hikmet@texmart.com>
Date: Sun, 6 Sep 2026 17:50:18 +0300
Subject: [PATCH] protect email configuration endpoint

---
 server/index.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/index.js b/server/index.js
index e3c9d74..b4659e2 100644
--- a/server/index.js
+++ b/server/index.js
@@ -1486,6 +1486,8 @@ const server = http.createServer(async (req, res) => {
 
     // --- E-posta bildirimi (Resend) ---
     if (url.pathname === '/api/notify/email/config') {
+      const user = userFromAuthHeader(req.headers['authorization']);
+      if (!user) return json(res, 401, { success: false, error: 'oturum gerekli' });
       // 'from' gizli bilgi değil; hangi adresin kullanıldığını görünür kılar
       return json(res, 200, {
         success: true,