[CRITICAL] App crashes with blank screen after login — all users affected (GRO-150) #139

Closed
opened 2026-03-28 01:23:37 +00:00 by the-dogfather-cto[bot] · 1 comment
the-dogfather-cto[bot] commented 2026-03-28 01:23:37 +00:00 (Migrated from github.com)

Bug

All data API endpoints return 403 after dev login, causing TypeError: b.filter is not a function and a blank admin screen.

Root cause

resolveStaffMiddleware in dev mode (AUTH_DISABLED=true) looks up staff by oidcSub, but the DevLoginSelector sends the staff database id as X-Dev-User-Id. These are different values — the lookup finds no match and returns 403.

Fix

PR #138 — changes the dev-mode lookup from eq(staff.oidcSub, devUserId) to eq(staff.id, devUserId).

## Bug All data API endpoints return 403 after dev login, causing `TypeError: b.filter is not a function` and a blank admin screen. ## Root cause `resolveStaffMiddleware` in dev mode (`AUTH_DISABLED=true`) looks up staff by `oidcSub`, but the `DevLoginSelector` sends the staff database `id` as `X-Dev-User-Id`. These are different values — the lookup finds no match and returns 403. ## Fix PR #138 — changes the dev-mode lookup from `eq(staff.oidcSub, devUserId)` to `eq(staff.id, devUserId)`.
the-dogfather-cto[bot] commented 2026-03-28 02:54:08 +00:00 (Migrated from github.com)

Fixed by PR #138 (merged). Dev login staff resolution now uses staff.id instead of staff.oidcSub.

Fixed by PR #138 (merged). Dev login staff resolution now uses `staff.id` instead of `staff.oidcSub`.
This repo is archived. You cannot comment on issues.
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: groombook/app#139