mirror of
https://github.com/bretzel-app/crumbs.git
synced 2026-10-12 20:06:57 +02:00
Frederic CabassutandClaude Opus 4.6
c9e041bffe
Add getUserId/requireAdmin helpers in api-utils.ts. All notes, tags, search, sync, and attachment routes now filter by userId to ensure complete data isolation between users. Sync server accepts userId parameter for push/pull operations. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
13 lines
377 B
TypeScript
13 lines
377 B
TypeScript
import { error, type RequestEvent } from '@sveltejs/kit';
|
|
|
|
export function getUserId(event: RequestEvent): number {
|
|
if (!event.locals.user) throw error(401, 'Unauthorized');
|
|
return event.locals.user.id;
|
|
}
|
|
|
|
export function requireAdmin(event: RequestEvent) {
|
|
const user = event.locals.user;
|
|
if (!user || user.role !== 'admin') throw error(403, 'Forbidden');
|
|
return user;
|
|
}
|