chore: apply middleware to all api routes

Author: kevinkim-ogp

packages/backend/src/routes/api/index.ts

@@ -1,9 +1,18 @@
 import { Router } from 'express'
 
+import {
+  requireAuthentication,
+  setCurrentUserContext,
+} from './middleware/authentication'
 import chatRouter from './chat'
 
 const router = Router()
 
+// Apply authentication middleware to ALL API routes
+// This mirrors how GraphQL handles authentication via context
+router.use(setCurrentUserContext)
+router.use(requireAuthentication)
+
 // Mount individual API routes
 router.use('/chat', chatRouter)