hotel-manage-stack/hvac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept the shared hnf_kiosk_session cookie

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
jtricerolph 2026-10-15 11:15:46 +00:00
parent dc845b2a2d
commit befa0ca103
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
backend/src/auth.js
View file

@ -11,7 +11,9 @@ export async function requireAuth(request, reply) {
// each other in the same browser — see project_hvac_kiosk memory, hit
// 2026-08-26 when kiosk login on a desktop browser interfered with normal
// staff login while both shared the 'hnf_session' name.
const token = request.cookies?.hnf_session || request.cookies?.hvac_kiosk_session
// hnf_kiosk_session is the shared back-of-house kiosk session minted by central
// auth (portal /kiosk); its token carries only hvac's registered kiosk caps.
const token = request.cookies?.hnf_session || request.cookies?.hnf_kiosk_session || request.cookies?.hvac_kiosk_session
if (!token) return reply.status(401).send({ error: 'Not authenticated' })
let payload