fix: requires auth to get all users

BrunoQuaresma · BrunoQuaresma · commit 1841e7f7f1d6 · 2022-04-15T15:58:50.000Z
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -138,14 +138,14 @@ func New(options *Options) (http.Handler, func()) {
 			})
 		})
 		r.Route("/users", func(r chi.Router) {
-			r.Get("/", api.getUsers)
 			r.Get("/first", api.firstUser)
 			r.Post("/first", api.postFirstUser)
 			r.Post("/login", api.postLogin)
 			r.Post("/logout", api.postLogout)
 			r.Group(func(r chi.Router) {
 				r.Use(httpmw.ExtractAPIKey(options.Database, nil))
 				r.Post("/", api.postUsers)
+				r.Get("/", api.getUsers)
 				r.Route("/{user}", func(r chi.Router) {
 					r.Use(httpmw.ExtractUserParam(options.Database))
 					r.Get("/", api.userByName)
