From 8ab2271ff948be51a6535c27d02ee99755751d09 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Tue, 2 Jun 2026 11:11:20 +0300
Subject: [PATCH] =?UTF-8?q?v0.5.4:=20fix=20isolation=20=E2=80=94=20resolve?=
 =?UTF-8?q?User=20syncs=20activeClientId=20from=20session?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 package.json | 2 +-
 ui/index.js  | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index c55d24b..41e713e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ipwhitelist",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "IP WhiteList microservice for cloud provider",
   "main": "server.js",
   "scripts": {
diff --git a/ui/index.js b/ui/index.js
index c7732ac..3bb3d89 100644
--- a/ui/index.js
+++ b/ui/index.js
@@ -52,7 +52,11 @@ function createUiRouter({ auth, MOCK_USERS, authLimiter }) {
       if (!payload) throw new Error('empty payload');
       const rawClientId = payload.ClientID || payload.clientId || payload.sub || '';
       const allClientIds = rawClientId.split(',').map(s => s.trim()).filter(Boolean);
-      const activeClientId = allClientIds[0] || rawClientId;
+      // activeClientId из сессии (переключатель компании) или первая из токена
+      const sessionActive = req.session && req.session.user && req.session.user.activeClientId;
+      const activeClientId = (sessionActive && allClientIds.includes(sessionActive))
+        ? sessionActive
+        : (allClientIds[0] || rawClientId);
 
       req.user = {
         clientId:       rawClientId,