Skip to content

Commit 77d743d

Browse files
committed
fix(auth): Redirect non-admin users to home page after user validation
1 parent 76d13e6 commit 77d743d

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

src/hooks.server.ts

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,16 +23,16 @@ const handleAuth: Handle = async ({ event, resolve }) => {
2323
name: `${userResponse.firstName} ${userResponse.lastName}`,
2424
role: userResponse.role as 'admin'
2525
};
26-
27-
// Verify user has admin role (from validated user data)
28-
if (event.locals.user.role !== 'admin') {
29-
console.log('User does not have admin role:', event.locals.user.role);
30-
throw redirect(303, '/login');
31-
}
3226
} catch (error) {
3327
event.cookies.delete('auth_token', { path: '/' });
3428
event.cookies.delete('user_role', { path: '/' });
3529
}
30+
31+
// If the user is not an admin, redirect to the home page
32+
if (event.locals.user?.role !== 'admin') {
33+
console.log('User is not an admin, redirecting to home');
34+
throw redirect(303, '/');
35+
}
3636
}
3737

3838
return resolve(event);

0 commit comments

Comments
 (0)