feat: add validation

apps/api/src/routes/internal/leafwatch/profile/details.ts

@@ -4,7 +4,8 @@ import logger from '@hey/lib/logger';
 import catchedError from 'src/lib/catchedError';
 import { SWR_CACHE_AGE_1_SEC_30_DAYS } from 'src/lib/constants';
 import createClickhouseClient from 'src/lib/createClickhouseClient';
-import { noBody } from 'src/lib/responses';
+import validateIsStaff from 'src/lib/middlewares/validateIsStaff';
+import { noBody, notAllowed } from 'src/lib/responses';
 
 export const get: Handler = async (req, res) => {
   const { id } = req.query;
@@ -13,6 +14,10 @@ export const get: Handler = async (req, res) => {
     return noBody(res);
   }
 
+  if (!(await validateIsStaff(req))) {
+    return notAllowed(res);
+  }
+
   try {
     const client = createClickhouseClient();
     const rows = await client.query({

apps/web/src/components/Staff/Users/Overview/Tool/LeafwatchDetails.tsx

@@ -10,6 +10,7 @@ import {
 import { AdjustmentsVerticalIcon } from '@heroicons/react/24/solid';
 import { HEY_API_URL } from '@hey/data/constants';
 import humanize from '@hey/lib/humanize';
+import getAuthApiHeaders from '@lib/getAuthApiHeaders';
 import { useQuery } from '@tanstack/react-query';
 import axios from 'axios';
 
@@ -32,7 +33,7 @@ const LeafwatchDetails: FC<LeafwatchDetailsProps> = ({ profileId }) => {
     try {
       const response = await axios.get(
         `${HEY_API_URL}/internal/leafwatch/profile/details`,
-        { params: { id: profileId } }
+        { headers: getAuthApiHeaders(), params: { id: profileId } }
       );
       const { data } = response;