From e580843b3a3a676480bc82d765c6b2cc1e5bbe3f Mon Sep 17 00:00:00 2001
From: juancarmore <juancar_more2@hotmail.com>
Date: Fri, 23 Jan 2026 19:14:34 +0100
Subject: [PATCH] backend: reorder middlewares in room and meeting routes

---
 meet-ce/backend/src/routes/meeting.routes.ts |  4 ++--
 meet-ce/backend/src/routes/room.routes.ts    | 16 ++++++++--------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/meet-ce/backend/src/routes/meeting.routes.ts b/meet-ce/backend/src/routes/meeting.routes.ts
index 3f06e284..07e5bf3e 100644
--- a/meet-ce/backend/src/routes/meeting.routes.ts
+++ b/meet-ce/backend/src/routes/meeting.routes.ts
@@ -2,9 +2,9 @@ import bodyParser from 'body-parser';
 import { Router } from 'express';
 import * as meetingCtrl from '../controllers/meeting.controller.js';
 import { roomMemberTokenValidator, withAuth } from '../middlewares/auth.middleware.js';
-import { withRoomMemberPermission } from '../middlewares/room-member.middleware.js';
 import { validateUpdateParticipantRoleReq } from '../middlewares/request-validators/meeting-validator.middleware.js';
 import { withValidRoomId } from '../middlewares/request-validators/room-validator.middleware.js';
+import { withRoomMemberPermission } from '../middlewares/room-member.middleware.js';
 
 export const internalMeetingRouter: Router = Router();
 internalMeetingRouter.use(bodyParser.urlencoded({ extended: true }));
@@ -29,7 +29,7 @@ internalMeetingRouter.put(
 	'/:roomId/participants/:participantIdentity/role',
 	withAuth(roomMemberTokenValidator),
 	withValidRoomId,
-	withRoomMemberPermission('canMakeModerator'),
 	validateUpdateParticipantRoleReq,
+	withRoomMemberPermission('canMakeModerator'),
 	meetingCtrl.updateParticipantRole
 );
diff --git a/meet-ce/backend/src/routes/room.routes.ts b/meet-ce/backend/src/routes/room.routes.ts
index b76e0523..e0c10e68 100644
--- a/meet-ce/backend/src/routes/room.routes.ts
+++ b/meet-ce/backend/src/routes/room.routes.ts
@@ -92,8 +92,8 @@ roomRouter.put(
 	'/:roomId/config',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateUpdateRoomConfigReq,
+	authorizeRoomManagement,
 	roomCtrl.updateRoomConfig
 );
 
@@ -101,24 +101,24 @@ roomRouter.put(
 	'/:roomId/status',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateUpdateRoomStatusReq,
+	authorizeRoomManagement,
 	roomCtrl.updateRoomStatus
 );
 roomRouter.put(
 	'/:roomId/roles',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateUpdateRoomRolesReq,
+	authorizeRoomManagement,
 	roomCtrl.updateRoomRoles
 );
 roomRouter.put(
 	'/:roomId/anonymous',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateUpdateRoomAnonymousReq,
+	authorizeRoomManagement,
 	roomCtrl.updateRoomAnonymous
 );
 
@@ -127,24 +127,24 @@ roomRouter.post(
 	'/:roomId/members',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateCreateRoomMemberReq,
+	authorizeRoomManagement,
 	roomMemberCtrl.createRoomMember
 );
 roomRouter.get(
 	'/:roomId/members',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateGetRoomMembersReq,
+	authorizeRoomManagement,
 	roomMemberCtrl.getRoomMembers
 );
 roomRouter.delete(
 	'/:roomId/members',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateBulkDeleteRoomMembersReq,
+	authorizeRoomManagement,
 	roomMemberCtrl.bulkDeleteRoomMembers
 );
 
@@ -159,8 +159,8 @@ roomRouter.put(
 	'/:roomId/members/:memberId',
 	withAuth(apiKeyValidator, tokenAndRoleValidator(MeetUserRole.ADMIN, MeetUserRole.USER)),
 	withValidRoomId,
-	authorizeRoomManagement,
 	validateUpdateRoomMemberReq,
+	authorizeRoomManagement,
 	roomMemberCtrl.updateRoomMember
 );
 roomRouter.delete(