fix: handle if invalid token

12 months ago · 67a13da1af
1 changed files with 4 additions and 0 deletions
--- a/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts
+++ b/packages/nocodb/src/middlewares/extract-ids/extract-ids.middleware.ts
@ -216,6 +216,10 @@ export class AclMiddleware implements NestInterceptor {

    const req = context.switchToHttp().getRequest();

+    if (!req.user?.isAuthorized) {
+      NcError.unauthorized('Invalid token');
+    }
+
    const userScopeRole =
      req.user.roles?.[OrgUserRoles.SUPER_ADMIN] === true
        ? OrgUserRoles.SUPER_ADMIN