Session 9: api-football + FootApi + Tank01 adapters, grace period middleware, cookie consent, /pricing page, OOM fix documented (1240 tests)

src/routes/alerts.js

@@ -1,12 +1,13 @@
 const express = require('express');
 const { requireAuth } = require('../middleware/auth');
+const { checkGracePeriod } = require('../middleware/gracePeriod');
 const { getAlertsForUser, markAlertRead } = require('../services/alertService');
 
 const router = express.Router();
 
 const PAID_TIERS = new Set(['analyst', 'desk']);
 
-router.get('/', requireAuth, async (req, res) => {
+router.get('/', requireAuth, checkGracePeriod, async (req, res) => {
   if (!PAID_TIERS.has(req.user.tier)) {
     return res.status(403).json({ error: 'Alerts are available on Analyst and Desk tiers' });
   }
@@ -20,7 +21,7 @@ router.get('/', requireAuth, async (req, res) => {
   }
 });
 
-router.patch('/:id/read', requireAuth, async (req, res) => {
+router.patch('/:id/read', requireAuth, checkGracePeriod, async (req, res) => {
   if (!PAID_TIERS.has(req.user.tier)) {
     return res.status(403).json({ error: 'Alerts are available on Analyst and Desk tiers' });
   }