From 3d96bba6c622c7f450e40cfe111ee8efbec24981 Mon Sep 17 00:00:00 2001
From: Deep Koluguri <deepkoluguri@gmail.com>
Date: Mon, 10 Nov 2025 23:39:33 -0500
Subject: [PATCH] UPI token fix

---
 backend/src/routes/transactionSync.js | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/backend/src/routes/transactionSync.js b/backend/src/routes/transactionSync.js
index 6b595a6..7bc9a00 100644
--- a/backend/src/routes/transactionSync.js
+++ b/backend/src/routes/transactionSync.js
@@ -1,42 +1,42 @@
 const express = require('express');
 const router = express.Router();
 const transactionSyncController = require('../controllers/transactionSyncController');
-const { requireManager } = require('../middleware/auth');
+const { authenticateToken, requireManager } = require('../middleware/auth');
 
 /**
  * @route   POST /api/transaction-sync/sync
  * @desc    Sync PhonePe transactions for manager
  * @access  Private (Managers only)
  */
-router.post('/sync', requireManager, transactionSyncController.syncTransactions);
+router.post('/sync', authenticateToken, requireManager, transactionSyncController.syncTransactions);
 
 /**
  * @route   GET /api/transaction-sync/review-queue
  * @desc    Get transactions needing manual review
  * @access  Private (Managers only)
  */
-router.get('/review-queue', requireManager, transactionSyncController.getReviewQueue);
+router.get('/review-queue', authenticateToken, requireManager, transactionSyncController.getReviewQueue);
 
 /**
  * @route   POST /api/transaction-sync/approve
  * @desc    Approve a suggested payment match
  * @access  Private (Managers only)
  */
-router.post('/approve', requireManager, transactionSyncController.approveSuggestedMatch);
+router.post('/approve', authenticateToken, requireManager, transactionSyncController.approveSuggestedMatch);
 
 /**
  * @route   POST /api/transaction-sync/reject
  * @desc    Reject a suggested payment match
  * @access  Private (Managers only)
  */
-router.post('/reject', requireManager, transactionSyncController.rejectSuggestedMatch);
+router.post('/reject', authenticateToken, requireManager, transactionSyncController.rejectSuggestedMatch);
 
 /**
  * @route   GET /api/transaction-sync/stats
  * @desc    Get sync statistics
  * @access  Private (Managers only)
  */
-router.get('/stats', requireManager, transactionSyncController.getSyncStats);
+router.get('/stats', authenticateToken, requireManager, transactionSyncController.getSyncStats);
 
 module.exports = router;