mbkauthe 1.0.8 → 1.0.9

package/lib/main.js

@@ -187,11 +187,11 @@ router.post("/mbkauthe/api/login", async (req, res) => {
 
     if (mbkautheVar.test === "true") {
       // Check if the user is authorized to use the application
-      if (result.rows[0].Role !== "SuperAdmin") {
-        const allowedApps = result.rows[0].AllowedApps;
+      if (user.Role !== "SuperAdmin") {
+        const allowedApps = user.AllowedApps;
         if (!allowedApps || !allowedApps.includes(mbkautheVar.APP_NAME)) {
-          console.warn(`User \"${req.session.user.username}\" is not authorized to use the application \"${mbkautheVar.APP_NAME}\"`);
-          return res.status(403).json({ success: false, message: `You are not authorized to use the application \"${mbkautheVar.APP_NAME}\"` });
+          console.warn(`User \"${user.UserName}\" is not authorized to use the application \"${mbkautheVar.APP_NAME}\"`);
+          return res.status(403).json({ success: false, message: `You Are Not Authorized To Use The Application \"${mbkautheVar.APP_NAME}\"` });
         }
       }
     }

package/lib/validateSessionAndRole.js

@@ -8,6 +8,7 @@ async function validateSession(req, res, next) {
       const sessionId = req.cookies.sessionId;
       const query = `SELECT * FROM "Users" WHERE "SessionId" = $1`;
       const result = await dblogin.query(query, [sessionId]);
+      const userResult= result.rows[0];
 
       if (result.rows.length > 0) {
         const user = result.rows[0];
@@ -31,10 +32,11 @@ async function validateSession(req, res, next) {
 
   try {
     const { id, sessionId } = req.session.user;
-    const query = `SELECT "SessionId", "Active" FROM "Users" WHERE "id" = $1`;
+    const query = `SELECT "SessionId", "Active", "AllowedApps" FROM "Users" WHERE "id" = $1`;
     const result = await dblogin.query(query, [id]);
+    const userResult= result.rows[0];
 
-    if (result.rows.length === 0 || result.rows[0].SessionId !== sessionId) {
+    if (result.rows.length === 0 || userResult.SessionId !== sessionId) {
       console.log(`Session invalidated for user "${req.session.user.username}"`);
       req.session.destroy();
       res.clearCookie("mbkauthe.sid", { domain: `.${mbkautheVar.DOMAIN}` });
@@ -44,7 +46,7 @@ async function validateSession(req, res, next) {
       });
     }
 
-    if (!result.rows[0].Active) {
+    if (!userResult.Active) {
       console.log(`Account is inactive for user "${req.session.user.username}"`);
       req.session.destroy();
       res.clearCookie("mbkauthe.sid", { domain: `.${mbkautheVar.DOMAIN}` });
@@ -55,22 +57,20 @@ async function validateSession(req, res, next) {
     }
 
     if (mbkautheVar.test === "true") {
-      if (result.rows[0].Role !== "SuperAdmin") {
-        const allowedApps = result.rows[0].AllowedApps;
+      if (userResult.Role !== "SuperAdmin") {
+        const allowedApps = userResult.AllowedApps;
         if (!allowedApps || !allowedApps.includes(mbkautheVar.APP_NAME)) {
-          console.warn(
-            `User \"${req.session.user.username}\" is not authorized to use the application \"${mbkautheVar.APP_NAME}\"`
-          );
+          console.warn(`User \"${req.session.user.username}\" is not authorized to use the application \"${mbkautheVar.APP_NAME}\"`);
           req.session.destroy();
-          res.clearCookie("connect.sid");
-          return res.render("templates/Error/AccountInactive.handlebars", {
-            currentUrl: req.originalUrl,
+          res.clearCookie("mbkauthe.sid", { domain: `.${mbkautheVar.DOMAIN}` });
+          res.clearCookie("sessionId", { domain: `.${mbkautheVar.DOMAIN}` });
+          return res.render("templates/Error/Error.handlebars", {
+            error: `You Are Not Authorized To Use The Application \"${mbkautheVar.APP_NAME}\"`,
           });
         }
       }
     }
 
-
     next();
   } catch (err) {
     console.error("Session validation error:", err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mbkauthe",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "MBKTechStudio's reusable authentication system for Node.js applications.",
   "main": "index.js",
   "type": "module",