feat: Implement multi-tenancy with new database migrations, API updates across services, and refactor frontend API calls.

services/cms-service/src/main.rs

@@ -1,8 +1,9 @@
 mod handlers;
 
 use axum::{
-    routing::{get, post, delete},
+    routing::{get, post, delete, put},
     Router,
+    middleware,
 };
 use tower_http::cors::{Any, CorsLayer};
 use sqlx::postgres::PgPoolOptions;
@@ -33,28 +34,34 @@ async fn main() {
         .allow_methods(Any)
         .allow_headers(Any);
 
-    let app = Router::new()
+    // Rutas protegidas que requieren autenticación y contexto de organización
+    let protected_routes = Router::new()
         .route("/courses", get(handlers::get_courses).post(handlers::create_course))
-        .route("/courses/{id}", get(handlers::get_course).put(handlers::update_course))
+        .route("/courses/:id", get(handlers::get_course).put(handlers::update_course))
         .route("/courses/{id}/publish", post(handlers::publish_course))
         .route("/courses/{id}/analytics", get(handlers::get_course_analytics))
         .route("/modules", get(handlers::get_modules).post(handlers::create_module))
         .route("/lessons", get(handlers::get_lessons).post(handlers::create_lesson))
-        .route("/lessons/{id}", get(handlers::get_lesson).put(handlers::update_lesson))
+        .route("/lessons/:id", get(handlers::get_lesson).put(handlers::update_lesson))
         .route("/lessons/{id}/transcribe", post(handlers::process_transcription))
-        .route("/auth/register", post(handlers::register))
-        .route("/auth/login", post(handlers::login))
         .route("/grading", post(handlers::create_grading_category))
-        .route("/grading/{id}", delete(handlers::delete_grading_category))
+        .route("/grading/:id", delete(handlers::delete_grading_category))
         .route("/courses/{id}/grading", get(handlers::get_grading_categories))
         .route("/audit-logs", get(handlers::get_audit_logs))
         .route("/assets/upload", post(handlers::upload_asset))
+        .route_layer(middleware::from_fn(common::middleware::org_extractor_middleware));
+
+    // Rutas públicas que no requieren autenticación
+    let public_routes = Router::new()
+        .route("/auth/register", post(handlers::register))
+        .route("/auth/login", post(handlers::login))
         .nest_service("/assets", tower_http::services::ServeDir::new("uploads"))
+        .merge(protected_routes)
         .layer(cors)
         .with_state(pool);
 
     let addr = SocketAddr::from(([0, 0, 0, 0], 3001));
     tracing::info!("CMS Service listening on {}", addr);
     let listener = tokio::net::TcpListener::bind(addr).await.unwrap();
-    axum::serve(listener, app).await.unwrap();
+    axum::serve(listener, public_routes).await.unwrap();
 }