From a65360b82d7b75028d935306611ebb7c4d84e102 Mon Sep 17 00:00:00 2001 From: Stefan Lazic Date: Fri, 4 Sep 2026 22:55:53 +0100 Subject: [PATCH] Update management-auth.ts --- src/services/management/management-auth.ts | 22 ++++++++++++++++++++-- 1 file changed, 20 insertions(+), 2 deletions(-) diff --git a/src/services/management/management-auth.ts b/src/services/management/management-auth.ts index 67a5ec6..809410d 100644 --- a/src/services/management/management-auth.ts +++ b/src/services/management/management-auth.ts @@ -48,14 +48,32 @@ export async function clearManagerSession() { export async function isManagerAuthenticated() { const config = getManagerConfig(); + + console.log("[manager-auth] auth secret:", config.authSecret ? "set" : "missing"); + if (!config.authSecret) return false; - const rawValue = (await cookies()).get(COOKIE_NAME)?.value; + + const cookieStore = await cookies(); + const rawValue = cookieStore.get(COOKIE_NAME)?.value; + + console.log("[manager-auth] cookie:", rawValue ? "received" : "missing"); + const value = rawValue ? decodeURIComponent(rawValue) : undefined; + if (!value) return false; + const separator = value.lastIndexOf("."); if (separator < 1) return false; + const payload = value.slice(0, separator); const received = Buffer.from(value.slice(separator + 1)); const expected = Buffer.from(signature(payload, config.authSecret)); - return received.length === expected.length && timingSafeEqual(received, expected); + + const valid = + received.length === expected.length && + timingSafeEqual(received, expected); + + console.log("[manager-auth] signature valid:", valid); + + return valid; }