fix(auth): 🚑️ Don't allow user without id

baptisteArno · Feb 24, 2022 · 7e7596d · 7e7596d · vercel · Feb 24, 2022
1 parent cc1dd51
commit 7e7596d
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/apps/builder/pages/api/typebots.ts b/apps/builder/pages/api/typebots.ts
@@ -8,11 +8,10 @@ import { methodNotAllowed } from 'utils'
 
 const handler = async (req: NextApiRequest, res: NextApiResponse) => {
   const session = await getSession({ req })
-
   if (!session?.user)
     return res.status(401).json({ message: 'Not authenticated' })
-
   const user = session.user as User
+  if (!user.id) return res.status(401).json({ message: 'Not authenticated' })
   try {
     if (req.method === 'GET') {
       const folderId = req.query.folderId ? req.query.folderId.toString() : null