feat: admin controls

server/utils/auth.ts

@@ -2,9 +2,12 @@ import type { H3Event } from 'h3';
 import { auth } from '~~/lib/auth';
 
 export const protectRoute = async (event: H3Event) => {
-    const sessionData = await auth.api.getSession({ headers: event.headers });
+    const sessionData = await auth.api.getSession({
+        headers: event.headers,
+        query: { disableCookieCache: true },
+    });
 
-    if (sessionData === null) {
+    if (sessionData === null || sessionData.user.banned) {
         throw createError({
             statusCode: 401,
             statusMessage: 'Unauthorized',
@@ -12,4 +15,5 @@ export const protectRoute = async (event: H3Event) => {
     }
 
     event.context.user = sessionData.user;
+    return sessionData;
 };