mirror of
https://github.com/pacnpal/thrilltrack-explorer.git
synced 2025-12-22 18:31:13 -05:00
Fix MFA check in moderation queue
This commit is contained in:
@@ -1,6 +1,7 @@
|
|||||||
import { useState, useCallback, useRef, useEffect, useMemo } from "react";
|
import { useState, useCallback, useRef, useEffect, useMemo } from "react";
|
||||||
import { supabase } from "@/integrations/supabase/client";
|
import { supabase } from "@/integrations/supabase/client";
|
||||||
import { useToast } from "@/hooks/use-toast";
|
import { useToast } from "@/hooks/use-toast";
|
||||||
|
import { useAuth } from "@/hooks/useAuth";
|
||||||
import { logger } from "@/lib/logger";
|
import { logger } from "@/lib/logger";
|
||||||
import { getErrorMessage } from "@/lib/errorHandler";
|
import { getErrorMessage } from "@/lib/errorHandler";
|
||||||
import { MODERATION_CONSTANTS } from "@/lib/moderation/constants";
|
import { MODERATION_CONSTANTS } from "@/lib/moderation/constants";
|
||||||
@@ -90,6 +91,7 @@ export function useModerationQueueManager(config: ModerationQueueManagerConfig):
|
|||||||
|
|
||||||
const { user, isAdmin, isSuperuser, toast, optimisticallyUpdateStats, settings } = config;
|
const { user, isAdmin, isSuperuser, toast, optimisticallyUpdateStats, settings } = config;
|
||||||
const queryClient = useQueryClient();
|
const queryClient = useQueryClient();
|
||||||
|
const { aal } = useAuth();
|
||||||
|
|
||||||
// Initialize sub-hooks
|
// Initialize sub-hooks
|
||||||
const filters = useModerationFilters({
|
const filters = useModerationFilters({
|
||||||
@@ -271,11 +273,6 @@ export function useModerationQueueManager(config: ModerationQueueManagerConfig):
|
|||||||
setActionLoading(item.id);
|
setActionLoading(item.id);
|
||||||
|
|
||||||
// Check MFA (AAL2) requirement before moderation action
|
// Check MFA (AAL2) requirement before moderation action
|
||||||
const { data: { session } } = await supabase.auth.getSession();
|
|
||||||
|
|
||||||
// Access AAL from session metadata
|
|
||||||
const aal = session?.user?.app_metadata?.aal || session?.user?.user_metadata?.aal;
|
|
||||||
|
|
||||||
if (aal !== 'aal2') {
|
if (aal !== 'aal2') {
|
||||||
toast({
|
toast({
|
||||||
title: "MFA Verification Required",
|
title: "MFA Verification Required",
|
||||||
|
|||||||
Reference in New Issue
Block a user