jason/polaris-task-force
1
0
Fork 0
Code Issues Wiki Activity
polaris-task-force/src/app/(frontend)/logistics/banking
History
Z8MB1E c0d00fc113 fix(auth): reject MCP API-key sessions in user auth paths 
With the MCP plugin enabled, payload.auth() can return a
payload-mcp-api-keys doc instead of a User. Add an isPayloadUser
type guard and use it in every server action, page, and route that
treats the auth result as a real user, so API-key sessions can no
longer pass user auth checks. hasRoles now explicitly requires a
users-collection doc.
2026-08-25 12:27:35 -04:00
..
[id] feat(rbac): migrate server actions and service layers to RBAC 2026-08-19 19:47:57 -04:00
actions.ts fix(auth): reject MCP API-key sessions in user auth paths 2026-08-25 12:27:35 -04:00
page.tsx fix(auth): reject MCP API-key sessions in user auth paths 2026-08-25 12:27:35 -04:00