From 4b062d00e550cad1286999734902bfb9572bc1db Mon Sep 17 00:00:00 2001 From: SrGooglo Date: Sat, 25 Jan 2025 19:43:28 +0000 Subject: [PATCH] fix `onlyAdmin` middleware --- packages/server/middlewares/onlyAdmin/index.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/server/middlewares/onlyAdmin/index.js b/packages/server/middlewares/onlyAdmin/index.js index eea3a6b2..617dfb5d 100755 --- a/packages/server/middlewares/onlyAdmin/index.js +++ b/packages/server/middlewares/onlyAdmin/index.js @@ -1,8 +1,10 @@ -export default (req, res, next) => { +export default async (req, res, next) => { if (!req.auth) { return res.status(401).json({ error: "No authenticated" }) } + req.auth.user = await req.auth.user() + if (!req.auth.user.roles.includes("admin")) { return res.status(403).json({ error: "To make this request it is necessary to have administrator permissions" }) }