pass access token through API to enforce rank

This commit is contained in:
Hazelnoot 2025-06-21 12:40:37 -04:00
parent fae87e03c0
commit 186c615e3f
166 changed files with 473 additions and 380 deletions

View file

@ -35,7 +35,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
private userSuspendService: UserSuspendService,
private roleService: RoleService,
) {
super(meta, paramDef, async (ps, me) => {
super(meta, paramDef, async (ps, me, token) => {
const user = await this.usersRepository.findOneBy({ id: ps.userId });
if (user == null) {
@ -44,7 +44,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
if (user.isSuspended) return;
if (await this.roleService.isModerator(user)) {
if (await this.roleService.isModerator(user, token)) {
throw new Error('cannot suspend moderator account');
}