admin-aaw/snapify-authentik
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

fix users without session cannot view shared videos

Browse source
This commit is contained in:
MarconLP 2023-04-23 15:26:51 +02:00
parent d6f2be85d2
commit 0f58a9fda4
No known key found for this signature in database
GPG key ID: A08A9C8B623F5EA5
1 changed files with 17 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
src/server/api/routers/video.ts
View file

@ -65,24 +65,26 @@ export const videoRouter = createTRPCRouter({
throw new TRPCError({ code: "NOT_FOUND" });
}
if (!session || (video.userId !== session?.user.id && !video.sharing)) {
if (video.userId !== session?.user.id && !video.sharing) {
throw new TRPCError({ code: "FORBIDDEN" });
}
posthog.capture({
distinctId: session.user.id,
event: "viewing video",
properties: {
videoId: video.id,
videoCreatedAt: video.createdAt,
videoUpdatedAt: video.updatedAt,
videoUser: video.user.id,
videoSharing: video.sharing,
videoDeleteAfterLinkExpires: video.delete_after_link_expires,
videoShareLinkExpiresAt: video.shareLinkExpiresAt,
},
});
void posthog.shutdownAsync();
if (session) {
posthog.capture({
distinctId: session.user.id,
event: "viewing video",
properties: {
videoId: video.id,
videoCreatedAt: video.createdAt,
videoUpdatedAt: video.updatedAt,
videoUser: video.user.id,
videoSharing: video.sharing,
videoDeleteAfterLinkExpires: video.delete_after_link_expires,
videoShareLinkExpiresAt: video.shareLinkExpiresAt,
},
});
void posthog.shutdownAsync();
}
const getObjectCommand = new GetObjectCommand({
Bucket: env.AWS_BUCKET_NAME,