From d2a997a34b52af353de1689bb2fedb87417606d3 Mon Sep 17 00:00:00 2001
From: KMKoushik <koushikmohan1996@gmail.com>
Date: Mon, 20 May 2024 18:30:29 +1000
Subject: [PATCH] Fix: Block tRPC calls if user is not beta

---
 apps/web/src/server/api/trpc.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/web/src/server/api/trpc.ts b/apps/web/src/server/api/trpc.ts
index 8c678de..51a1097 100644
--- a/apps/web/src/server/api/trpc.ts
+++ b/apps/web/src/server/api/trpc.ts
@@ -96,9 +96,10 @@ export const publicProcedure = t.procedure;
  * @see https://trpc.io/docs/procedures
  */
 export const protectedProcedure = t.procedure.use(({ ctx, next }) => {
-  if (!ctx.session || !ctx.session.user) {
+  if (!ctx.session || !ctx.session.user || !ctx.session.user.isBetaUser) {
     throw new TRPCError({ code: "UNAUTHORIZED" });
   }
+
   return next({
     ctx: {
       // infers the `session` as non-nullable