feat: allow select HTTP routes to be protected via JWT

Signed-off-by: ljedrz <[email protected]>

node/rest/src/lib.rs

@@ -103,6 +103,10 @@ impl<N: Network, C: ConsensusStorage<N>, R: Routing<N>> Rest<N, C, R> {
         let router = {
             axum::Router::new()
 
+            // All the endpoints before the call to `route_layer` are protected with JWT auth.
+            .route("/testnet3/node/address", get(Self::get_node_address))
+            .route_layer(middleware::from_fn(auth_middleware))
+
             // ----------------- DEPRECATED ROUTES -----------------
             // The following `GET ../latest/..` routes will be removed before mainnet.
             // Please refer to the recommended routes for each endpoint:
@@ -157,7 +161,6 @@ impl<N: Network, C: ConsensusStorage<N>, R: Routing<N>> Rest<N, C, R> {
             .route("/testnet3/statePath/:commitment", get(Self::get_state_path_for_commitment))
             .route("/testnet3/stateRoot/latest", get(Self::get_state_root_latest))
             .route("/testnet3/committee/latest", get(Self::get_committee_latest))
-            .route("/testnet3/node/address", get(Self::get_node_address))
 
             // Pass in `Rest` to make things convenient.
             .with_state(self.clone())
@@ -169,8 +172,6 @@ impl<N: Network, C: ConsensusStorage<N>, R: Routing<N>> Rest<N, C, R> {
             .layer(cors)
             // Cap body size at 10MB.
             .layer(DefaultBodyLimit::max(10 * 1024 * 1024))
-            // JWT auth.
-            // .layer(middleware::from_fn(auth_middleware))
         };
 
         self.handles.lock().push(tokio::spawn(async move {