hotel-manage-stack/auth
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Fix reveal-secret: use user_id from JWT payload (not id)

Browse source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
jtricerolph 2026-07-15 17:22:57 +00:00
parent ec0eef7de0
commit 5673f3e80a
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/routes/admin.js
View file

@ -414,7 +414,7 @@ export async function adminRoutes(app) {
const { password } = request.body || {} const { password } = request.body || {}
if (!password) return reply.status(400).send({ error: 'Password required' }) if (!password) return reply.status(400).send({ error: 'Password required' })
const adminId = request.adminPayload.id const adminId = request.adminPayload.user_id
const { rows: [user] } = await pool.query( const { rows: [user] } = await pool.query(
'SELECT password_hash FROM users WHERE id = $1 AND active = true AND is_admin = true', 'SELECT password_hash FROM users WHERE id = $1 AND active = true AND is_admin = true',
[adminId] [adminId]