feat: add cerbos access control

2025-09-19 03:28:00 +02:00
parent d322138502
commit 74a9426bcc
41 changed files with 999 additions and 821 deletions
--- a/api/routes/auth/session.ts
+++ b/api/routes/auth/session.ts
@@ -3,8 +3,8 @@ import { session } from "@spec/schemas/auth/routes.ts";

 import { getAccountById } from "~stores/read-store/methods.ts";

-export default session.access("session").handle(async ({ accountId }) => {
-  const account = await getAccountById(accountId);
+export default session.access("authenticated").handle(async ({ principal }) => {
+  const account = await getAccountById(principal.id);
  if (account === undefined) {
    return new UnauthorizedError();
  }