Guard permission checks for empty jwt

spraakbanken · Sep 6, 2023 · 8827c35 · 8827c35
1 parent 75d00fa
commit 8827c35
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/auth/auth.composable.js b/src/auth/auth.composable.js
@@ -31,11 +31,11 @@ export function useAuth() {
 
   const isAuthenticated = computed(() => !!jwt.value);
   const payload = computed(() => decodeJwt(jwt.value)?.payload);
-  const canUserAdmin = computed(() =>
-    canAdmin(payload.value, "other", "mink-app")
+  const canUserAdmin = computed(
+    () => payload.value && canAdmin(payload.value, "other", "mink-app")
   );
-  const canUserWrite = computed(() =>
-    canWrite(payload.value, "other", "mink-app")
+  const canUserWrite = computed(
+    () => payload.value && canWrite(payload.value, "other", "mink-app")
   );
 
   /** If not authenticated, redirect to the login page. */