Admin: validate admin endpoints require strict auth (no fallback)

[greatest0fallt1me]

Description

Implement the change described by the title, ensuring it is secure, tested, and maintainable.

Requirements and context

• Must be secure, tested, and documented.
• Keep the change efficient and easy to review.

Suggested execution

• Fork the repo and create a branch: git checkout -b test/admin-auth-strictness
• Work in Callora-Backend (TypeScript / Express).

Primary paths

src/routes/admin.ts

• Run npm run lint, npm run typecheck, and npm test.

Deliverables

• Update the referenced paths.
• Add or update tests covering success + failure modes.
• Include PR notes on security/data-integrity assumptions.

Test and commit

• Add or extend unit and/or integration tests (src/**/*.test.ts, tests/integration/**).
• Paste summarized test output in the PR; call out security or data-integrity notes.

Example commit message

chore(backend): validate admin endpoints require strict auth (no fallback)

Guidelines

• Tests should cover new behavior and important edge cases.
• Keep changes focused; follow existing patterns in the codebase.
• Timeframe: 96 hours from assignment unless agreed otherwise.

[Jennnybee]

@Jennnybee has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

Hi I would like to work and contribute to this project

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Jennnybee to this issue.

[drips-wave]

Congratulations, @Jennnybee! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on April 29, 2026.

🧑‍💻 @Jennnybee: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊