Figure out how to admin delete profile

[joelamouche]

• for deprecated profiles that we don't have access to anymore
• spam

[tusharshah21]

Implement an admin endpoint in the API that accepts a profile ID and deletes it directly from the database, bypassing standard auth checks.
Steps

• Add admin route: DELETE /admin/profiles/:id with admin auth check.
• Handler: Validate admin, delete profile via repo, return response.
• Bypass auth: Skip for /admin/* paths with admin token.
• Test: Verify deletion and access control.

[tusharshah21]

what say @joelamouche ?

[joelamouche]

Sorry I missed the notification.
Okay that sounds good but how would you implement admin auth?

• Maybe a single password (simple but weak, ok to start I think)
• Or hardcoded list of admin addresses in the backend, and then use siwe

[tusharshah21]

looking to implement this mate, can you assign this to me?

[joelamouche]

Sure but what is your implementation proposal (see my post above)?

Also now that you are in the repo, pls clone this repo directly and work from there

[tusharshah21]

I propose starting with a simple admin auth using a hardcoded list of admin wallet addresses in the backend, verified via SIWE. The /admin/ routes will require a valid SIWE session and check the address against the admin list before allowing deletion. This keeps it secure enough for now and easy to extend later.

I’ll clone the repo and start working on it.

[joelamouche]

okay sounds good!