From e5b27b77c9d2ba53500eb2a97560cfea1c5aa863 Mon Sep 17 00:00:00 2001
From: sianida26 <chesakeselekkebo@gmail.com>
Date: Thu, 23 May 2024 23:35:09 +0700
Subject: [PATCH] Fix permission authentication-only not returning true

---
 apps/backend/src/middlewares/checkPermission.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/backend/src/middlewares/checkPermission.ts b/apps/backend/src/middlewares/checkPermission.ts
index 0b213ff..f69cd64 100644
--- a/apps/backend/src/middlewares/checkPermission.ts
+++ b/apps/backend/src/middlewares/checkPermission.ts
@@ -27,11 +27,13 @@ const checkPermission = (...permissions: PermissionCode[]) =>
 			const hasPermission = currentUser.permissions.some((p) =>
 				permissions.includes(p)
 			);
-			if (hasPermission) {
+			if (hasPermission || permissions.includes("authenticated-only")) {
 				await next();
 			} else {
 				unauthorized();
 			}
+		} else if (permissions.includes("guest-only")) {
+			await next();
 		} else {
 			// No current user found, trigger unauthorized error
 			unauthorized();