fix(api): enforce requireSuperUser on settings PATCH and fix dev-mode auth bypass #206

Merged
groombook-engineer[bot] merged 2 commits from fix/gro-263-dev-login-session-switch into main 2026-04-02 12:57:56 +00:00
Showing only changes of commit 01b090f258 - Show all commits
-1
View File
@@ -289,7 +289,6 @@ describe("requireSuperUser", () => {
});
it("returns 403 when staff record is not resolved", async () => {
const app = buildWithStaff(MANAGER, requireSuperUser());
// Manually remove staff from context to simulate unresolved staff
const testApp = new Hono<AppEnv>();
testApp.use("*", async (c, next) => {