From 1eb8eab76f09f25b156a7391dc99c0da971895df Mon Sep 17 00:00:00 2001 From: Jordan Ramos Date: Thu, 14 May 2026 10:15:15 -0600 Subject: [PATCH] Fix route mount order: vcl-multi must precede general compliance router --- backend/server.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/backend/server.js b/backend/server.js index 98b55db..e1e3919 100644 --- a/backend/server.js +++ b/backend/server.js @@ -211,12 +211,13 @@ app.use('/api/ivanti/archive', createIvantiArchiveRouter()); // Ivanti FP workflow routes — submit False Positive workflows to Ivanti API app.use('/api/ivanti/fp-workflow', createIvantiFpWorkflowRouter()); +// VCL multi-vertical routes — cross-organizational compliance reporting +// Must be mounted BEFORE the general compliance router since both share the /api/compliance prefix +app.use('/api/compliance/vcl-multi', createVCLMultiVerticalRouter(upload)); + // AEO compliance routes — xlsx upload, non-compliant item tracking, notes app.use('/api/compliance', createComplianceRouter(upload)); -// VCL multi-vertical routes — cross-organizational compliance reporting -app.use('/api/compliance/vcl-multi', createVCLMultiVerticalRouter(upload)); - // Atlas InfoSec action plan routes — proxy CRUD to Atlas API, local cache for badges app.use('/api/atlas', createAtlasRouter());