Merge pull request #7295 from overleaf/jpa-require-login-multi-zip

[web] restrict multi-project zip download to logged-in users

GitOrigin-RevId: f1e80fd62a4d60a5e64d683108ef2547b1c18a30

services/web/app/src/router.js

@@ -691,6 +691,7 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
   )
   webRouter.get(
     '/project/download/zip',
+    AuthenticationController.requireLogin(),
     RateLimiterMiddleware.rateLimit({
       endpointName: 'multiple-projects-zip-download',
       maxRequests: 10,