From 8fadfc7d66c759f3a87822468c3a21a59f6813c2 Mon Sep 17 00:00:00 2001 From: Alex Vydrin Date: Fri, 24 Apr 2026 10:54:52 +0200 Subject: [PATCH] Fix isAdminUserMiddleware to propagate DB errors instead of silently redirecting Made-with: Cursor --- app/routes/session.js | 1 + 1 file changed, 1 insertion(+) diff --git a/app/routes/session.js b/app/routes/session.js index 3810fb980a..7f1d3e82ba 100644 --- a/app/routes/session.js +++ b/app/routes/session.js @@ -25,6 +25,7 @@ function SessionHandler(db) { this.isAdminUserMiddleware = (req, res, next) => { if (req.session.userId) { return userDAO.getUserById(req.session.userId, (err, user) => { + if (err) return next(err); return user && user.isAdmin ? next() : res.redirect("/login"); }); }