feat: add authentication

routes/api/movies/[name].ts

@@ -5,6 +5,7 @@ import * as tmdb from "@lib/tmdb.ts";
 import { fileExtension } from "https://deno.land/x/file_extension@v2.1.0/mod.ts";
 import { safeFileName } from "@lib/string.ts";
 import { createDocument } from "@lib/documents.ts";
+import { AccessDeniedError } from "@lib/errors.ts";
 
 export const handler: Handlers = {
   async GET(_, ctx) {
@@ -12,6 +13,11 @@ export const handler: Handlers = {
     return json(movie);
   },
   async POST(_, ctx) {
+    const session = ctx.state.session;
+    if (!session) {
+      throw new AccessDeniedError();
+    }
+
     const tmdbId = parseInt(ctx.params.name);
 
     const movieDetails = await tmdb.getMovie(tmdbId);