릴리스: v1.3.60 관리자 공개 토글과 인증 새로고침 안정화

backend/src/routes/games.js

@@ -5,7 +5,7 @@ const { requireAuth } = require('../middleware/auth')
 const router = express.Router()
 
 router.get('/', async (req, res) => {
-  const games = await listGames(req.session?.userId || '')
+  const games = await listGames(req.session?.userId || '', { includePrivate: !!req.session?.isAdmin })
   res.json({ games })
 })
 
@@ -30,6 +30,7 @@ router.delete('/:gameId/favorite', requireAuth, async (req, res) => {
 router.get('/:gameId', async (req, res) => {
   const detail = await getGameDetail(req.params.gameId)
   if (!detail) return res.status(404).json({ error: 'not_found' })
+  if (!detail.game.isPublic && !req.session?.isAdmin) return res.status(404).json({ error: 'not_found' })
   res.json({ game: detail.game, items: detail.items })
 })