new version

apps/api/src/app.ts

@@ -2,11 +2,13 @@ import express from 'express';
 import helmet from 'helmet';
 import cors from 'cors';
 import cookieParser from 'cookie-parser';
+import swaggerUi from 'swagger-ui-express';
 import { env } from './config/env';
+import { swaggerSpec } from './config/swagger';
+import { traceMiddleware } from './middleware/trace';
+import { authMiddleware } from './middleware/auth';
 import { errorHandler } from './middleware/error-handler';
-import walletSetupRoutes from './routes/wallet-setup.routes';
 import walletRoutes from './routes/wallet.routes';
-import vaultRoutes from './routes/vault.routes';
 import relayProxyRoutes from './routes/relay-proxy.routes';
 import tronProxyRoutes from './routes/tron-proxy.routes';
 import solSwapProxyRoutes from './routes/sol-swap-proxy.routes';
@@ -20,20 +22,26 @@ app.use(helmet());
 app.use(cors({ origin: env.frontendUrl, credentials: true }));
 app.use(express.json());
 app.use(cookieParser());
+app.use(traceMiddleware);
 
+// ── PUBLIC endpoints (no auth) ────────────────────────────────────────────────
 app.get('/api/health', (_req, res) => {
   res.json({ success: true, data: { status: 'ok' } });
 });
 
-app.use('/api/wallet', walletSetupRoutes);
-app.use('/api/wallets', walletRoutes);
-app.use('/api/vault', vaultRoutes);
-app.use('/api/relay', relayProxyRoutes);
-app.use('/api/tron', tronProxyRoutes);
-app.use('/api/sol/swap', solSwapProxyRoutes);
-app.use('/api/tron/swap', tronSwapProxyRoutes);
-app.use('/api/btc', btcProxyRoutes);
-app.use('/api/bsc/swap', bscSwapProxyRoutes);
+app.use('/api/docs', swaggerUi.serve, swaggerUi.setup(swaggerSpec));
+app.get('/api/docs/swagger.json', (_req, res) => {
+  res.json(swaggerSpec);
+});
+
+// ── PROTECTED endpoints (JWT required) ────────────────────────────────────────
+app.use('/api/wallets', authMiddleware, walletRoutes);
+app.use('/api/relay', authMiddleware, relayProxyRoutes);
+app.use('/api/tron', authMiddleware, tronProxyRoutes);
+app.use('/api/sol/swap', authMiddleware, solSwapProxyRoutes);
+app.use('/api/tron/swap', authMiddleware, tronSwapProxyRoutes);
+app.use('/api/btc', authMiddleware, btcProxyRoutes);
+app.use('/api/bsc/swap', authMiddleware, bscSwapProxyRoutes);
 
 app.use(errorHandler);