fix: don't create a session if user is not enabled (#518)

BearStudio · Sep 9, 2024 · 241ef7e · 241ef7e
1 parent e256bd7
commit 241ef7e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/server/config/auth.ts b/src/server/config/auth.ts
@@ -34,6 +34,12 @@ export const getServerAuthSession = cache(async () => {
 
  const { user, session } = await lucia.validateSession(sessionId);
 
+ if (user?.accountStatus !== 'ENABLED')
+ return {
+ user: null,
+ session: null,
+ };
+
  try {
  if (session?.fresh) {
  const sessionCookie = lucia.createSessionCookie(session.id);