From ce6b67e72ad06f6b1aac28c5b9fd1d94acc78099 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Thu, 11 Jun 2026 15:08:07 +0400
Subject: [PATCH] fix: email from session.user first, not JWT payload
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- req.session.user.email приоритетнее payload.email
- Исправляет отображение чужого email в header
---
 package.json | 2 +-
 ui/index.js  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index f9ad53f..2011d58 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ipwhitelist",
-  "version": "0.5.49",
+  "version": "0.5.50",
   "description": "IP WhiteList microservice for cloud provider",
   "main": "server.js",
   "scripts": {
diff --git a/ui/index.js b/ui/index.js
index 48958a2..b5d8ab5 100644
--- a/ui/index.js
+++ b/ui/index.js
@@ -69,7 +69,7 @@ function createUiRouter({ auth, MOCK_USERS, authLimiter }) {
         activeClientId,
         companyId:      payload.company_id   || payload.companyId   || null,
         companyName:    payload.company_name  || payload.companyName || activeClientId,
-        email:          payload.email || payload.login || activeClientId + '@unknown',
+        email:          req.session?.user?.email || payload.email || payload.login || activeClientId + '@unknown',
         isAdmin:        iamAdmin || isNail,
         canAdminMode,
         adminMode:      !!(req.session && req.session.adminMode),