Handle when there is no scope

OpenBeta · May 19, 2023 · 0c6b2a1 · 0c6b2a1
1 parent e5da2b0
commit 0c6b2a1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/__tests__/organizations.ts b/src/__tests__/organizations.ts
@@ -89,7 +89,7 @@ describe('organizations API', () => {
         userUuid,
         roles: ['user_admin']
       })
-
+      
       expect(createResponse.statusCode).toBe(200)
       const orgId = createResponse.body.data.organization.orgId
       // orgId is MUUID scalar type which should always be serialized into the muuid hex string format.

diff --git a/src/auth/middleware.ts b/src/auth/middleware.ts
@@ -19,7 +19,7 @@ export const createContext = async ({ req }): Promise<any> => {
     const token = authHeader.substring(7, authHeader.length).trim()
     const z = await verifyJWT(token)
 
-    user.isBuilder = z?.scope.includes('builder:default')
+    user.isBuilder = z?.scope?.includes('builder:default')
     user.roles = z?.['https://tacos.openbeta.io/roles'] ?? []
     const uidStr: string | undefined = z?.['https://tacos.openbeta.io/uuid']
     user.uuid = uidStr != null ? muid.from(uidStr) : undefined