fix: email from session.user first, not JWT payload

- req.session.user.email приоритетнее payload.email - Исправляет отображение чужого email в header
2026-06-11 15:08:07 +04:00
parent 9cb53df8b1
commit ce6b67e72a
2 changed files with 2 additions and 2 deletions
@@ -69,7 +69,7 @@ function createUiRouter({ auth, MOCK_USERS, authLimiter }) {
        activeClientId,
        companyId:      payload.company_id   || payload.companyId   || null,
        companyName:    payload.company_name  || payload.companyName || activeClientId,
-        email:          payload.email || payload.login || activeClientId + '@unknown',
+        email:          req.session?.user?.email || payload.email || payload.login || activeClientId + '@unknown',
        isAdmin:        iamAdmin || isNail,
        canAdminMode,
        adminMode:      !!(req.session && req.session.adminMode),