Fix admin authorization and harden chat requests

2026-10-05 22:49:29 +02:00
parent e8cd13a0af
commit c48e1b17c4
38 changed files with 4897 additions and 1257 deletions
@@ -46,7 +46,7 @@ function normalizeMarketPersonaType(personaType) {
 export function createRepositories(db, config) {
    const statements = {
        insertUser: db.prepare("INSERT INTO users (username, password) VALUES (?, ?)"),
-        getUser: db.prepare("SELECT username, password, session_version FROM users WHERE username = ?"),
+        getUser: db.prepare("SELECT username, password, role, session_version FROM users WHERE username = ?"),
        updateUsername: db.prepare("UPDATE users SET username = ? WHERE username = ?"),
        updatePassword: db.prepare("UPDATE users SET password = ? WHERE username = ?"),
        incrementSessionVersion: db.prepare("UPDATE users SET session_version = COALESCE(session_version, 0) + 1 WHERE username = ?"),