fragginwagon/memory-infrastructure-palace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🔒 Add Discord OAuth permission check for developer tools access

Browse Source
This commit is contained in:
Greg Jacobs
2026-01-30 05:40:37 +00:00
parent 616524d5ef
commit 7c512f410f
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
code/websites/pokedex.online/src/components/DeveloperTools.vue
View File

@@ -121,9 +121,11 @@
<script setup> <script setup>
import { ref, computed, onMounted, onUnmounted } from 'vue'; import { ref, computed, onMounted, onUnmounted } from 'vue';
import { useAuth } from '../composables/useAuth.js'; import { useAuth } from '../composables/useAuth.js';
import { useDiscordOAuth } from '../composables/useDiscordOAuth.js';
import { useFeatureFlags } from '../composables/useFeatureFlags.js'; import { useFeatureFlags } from '../composables/useFeatureFlags.js';
const { user, token } = useAuth(); const { user, token } = useAuth();
const discord = useDiscordOAuth();
const { const {
getFlags, getFlags,
toggle: toggleFlagOverride, toggle: toggleFlagOverride,
@@ -135,11 +137,18 @@ const isOpen = ref(false);
// Show in development mode or when authenticated with permission in production // Show in development mode or when authenticated with permission in production
const isAvailable = computed(() => { const isAvailable = computed(() => {
const isDev = process.env.NODE_ENV === 'development'; const isDev = process.env.NODE_ENV === 'development';
const hasPermission = user.value?.permissions?.includes(
// Check JWT token permissions
const hasJwtPermission = user.value?.permissions?.includes(
'developer_tools.view' 'developer_tools.view'
); );
// Check Discord OAuth permissions
const hasDiscordPermission = discord.hasDevAccess();
const hasPermission = hasJwtPermission || hasDiscordPermission;
const isAuthenticatedInProduction = const isAuthenticatedInProduction =
process.env.NODE_ENV === 'production' && user.value && hasPermission; process.env.NODE_ENV === 'production' && hasPermission;
return isDev || isAuthenticatedInProduction; return isDev || isAuthenticatedInProduction;
}); });
const nodeEnv = computed(() => process.env.NODE_ENV || 'unknown'); const nodeEnv = computed(() => process.env.NODE_ENV || 'unknown');