Security: Unauthenticated notification creation
File: apps/api/src/routes/notificationRoutes.js
POST /api/notifications has no authMiddleware. Require authentication before postNotification. Add regression tests.
References #743 for low-hanging-fruit meta-bounty eligibility (duplicate opened so the contributor can claim and implement).
Security: Unauthenticated notification creation
File:
apps/api/src/routes/notificationRoutes.jsPOST /api/notificationshas noauthMiddleware. Require authentication beforepostNotification. Add regression tests.References #743 for low-hanging-fruit meta-bounty eligibility (duplicate opened so the contributor can claim and implement).