From d94956739114235656082c9a864d5bbc5f4897cf Mon Sep 17 00:00:00 2001
From: Jakob Ackermann <jakob.ackermann@overleaf.com>
Date: Thu, 31 Mar 2022 08:54:53 +0100
Subject: [PATCH] Merge pull request #7295 from
 overleaf/jpa-require-login-multi-zip

[web] restrict multi-project zip download to logged-in users

GitOrigin-RevId: f1e80fd62a4d60a5e64d683108ef2547b1c18a30
---
 services/web/app/src/router.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/web/app/src/router.js b/services/web/app/src/router.js
index 8abe75a243..72bfb4bf9a 100644
--- a/services/web/app/src/router.js
+++ b/services/web/app/src/router.js
@@ -691,6 +691,7 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
   )
   webRouter.get(
     '/project/download/zip',
+    AuthenticationController.requireLogin(),
     RateLimiterMiddleware.rateLimit({
       endpointName: 'multiple-projects-zip-download',
       maxRequests: 10,