Fix: Block tRPC calls if user is not beta

This commit is contained in:
KMKoushik
2024-05-20 18:30:29 +10:00
parent d92feec4f8
commit d2a997a34b

View File

@@ -96,9 +96,10 @@ export const publicProcedure = t.procedure;
* @see https://trpc.io/docs/procedures * @see https://trpc.io/docs/procedures
*/ */
export const protectedProcedure = t.procedure.use(({ ctx, next }) => { export const protectedProcedure = t.procedure.use(({ ctx, next }) => {
if (!ctx.session || !ctx.session.user) { if (!ctx.session || !ctx.session.user || !ctx.session.user.isBetaUser) {
throw new TRPCError({ code: "UNAUTHORIZED" }); throw new TRPCError({ code: "UNAUTHORIZED" });
} }
return next({ return next({
ctx: { ctx: {
// infers the `session` as non-nullable // infers the `session` as non-nullable