groombook/app
Archived
13
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(api): enforce requireSuperUser on settings PATCH and fix dev-mode auth bypass #206

Merged
groombook-engineer[bot] merged 2 commits from fix/gro-263-dev-login-session-switch into main 2026-04-02 12:57:56 +00:00
Conversation 12 Commits 2 Files Changed 3
-1
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 01b090f258 - Show all commits
apps/api/src/__tests__/rbac.test.ts
-1
View File
@@ -289,7 +289,6 @@ describe("requireSuperUser", () => {
}); });
it("returns 403 when staff record is not resolved", async () => { it("returns 403 when staff record is not resolved", async () => {
const app = buildWithStaff(MANAGER, requireSuperUser());
// Manually remove staff from context to simulate unresolved staff // Manually remove staff from context to simulate unresolved staff
const testApp = new Hono<AppEnv>(); const testApp = new Hono<AppEnv>();
testApp.use("*", async (c, next) => { testApp.use("*", async (c, next) => {