Better blocking of no auth

ytgov · Aug 28, 2024 · 9090dfd · 9090dfd
1 parent c5a4009
commit 9090dfd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/web/src/modules/administration/router/index.ts b/src/web/src/modules/administration/router/index.ts
@@ -81,6 +81,8 @@ async function requireAccess(to: RouteLocation): Promise<boolean | string> {
 
   let user = await waitForUserToLoad();
 
+  if (!user) return "/NotAuthorized?Requires-User";
+
   if (user.STATUS != "Active") return "/NotAuthorized?Requires-Active";
 
   if (to.meta && to.meta.allow_admin && user.IS_ADMIN == "Y") return true;