feat: admin controls
This commit is contained in:
@@ -22,8 +22,11 @@ export default defineEventHandler(async (event) => {
|
||||
// Path 2: Session auth (for client-side access)
|
||||
if (!authorized) {
|
||||
try {
|
||||
const sessionData = await auth.api.getSession({ headers: event.headers });
|
||||
if (sessionData) {
|
||||
const sessionData = await auth.api.getSession({
|
||||
headers: event.headers,
|
||||
query: { disableCookieCache: true },
|
||||
});
|
||||
if (sessionData && !sessionData.user.banned) {
|
||||
event.context.user = sessionData.user;
|
||||
authorized = true;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user