v0.5.2: multi-company, isAdmin fix, appVersion, docs

2026-06-02 10:52:12 +03:00
parent 07528b0de3
commit a083f65323
13 changed files with 616 additions and 61 deletions
@@ -50,13 +50,18 @@ function createUiRouter({ auth, MOCK_USERS, authLimiter }) {
    try {
      const payload = jwt.decode(api.token(req));
      if (!payload) throw new Error('empty payload');
-      const clientId = payload.ClientID || payload.clientId || payload.sub || '';
+      const rawClientId = payload.ClientID || payload.clientId || payload.sub || '';
+      const allClientIds = rawClientId.split(',').map(s => s.trim()).filter(Boolean);
+      const activeClientId = allClientIds[0] || rawClientId;
+
      req.user = {
-        clientId,
-        companyId:   payload.company_id   || payload.companyId   || null,
-        companyName: payload.company_name  || payload.companyName || clientId,
-        email:       payload.email         || clientId + '@unknown',
-        isAdmin:     clientId === ADMIN_CLIENT_ID,
+        clientId:       rawClientId,
+        allClientIds,
+        activeClientId,
+        companyId:      payload.company_id   || payload.companyId   || null,
+        companyName:    payload.company_name  || payload.companyName || activeClientId,
+        email:          payload.email         || activeClientId + '@unknown',
+        isAdmin:        activeClientId === ADMIN_CLIENT_ID,
      };
    } catch (e) {
      req.session.destroy(() =>