fix: check JWT auth before email lookup in series purchase
This commit is contained in:
parent
bc887ca1d4
commit
44f3ee8c8c
1 changed files with 9 additions and 2 deletions
|
|
@ -33,9 +33,16 @@ export default defineEventHandler(async (event) => {
|
|||
});
|
||||
}
|
||||
|
||||
// Check membership
|
||||
// Check membership — prefer JWT auth for accurate member pricing
|
||||
let member = null;
|
||||
try {
|
||||
member = await requireAuth(event);
|
||||
} catch {
|
||||
// Not authenticated — fall through to email lookup
|
||||
}
|
||||
if (!member) {
|
||||
member = await Member.findOne({ email: email.toLowerCase() });
|
||||
}
|
||||
|
||||
// Validate purchase
|
||||
const validation = validateSeriesTicketPurchase(series, {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue