diff --git a/src/backend/src/middleware/configurable_auth.js b/src/backend/src/middleware/configurable_auth.js index f4237d62f..9895f2082 100644 --- a/src/backend/src/middleware/configurable_auth.js +++ b/src/backend/src/middleware/configurable_auth.js @@ -120,6 +120,10 @@ const configurable_auth = options => async (req, res, next) => { req.token = new_info.token; req.user = new_info.user; req.actor = new_info.actor; + + if ( req.user?.suspended ) { + throw APIError.create('forbidden'); + } res.cookie(config.cookie_name, new_info.token, { sameSite: 'none', @@ -136,7 +140,12 @@ const configurable_auth = options => async (req, res, next) => { // === Populate Context === context.set('actor', actor); - if ( actor.type.user ) context.set('user', actor.type.user); + if ( actor.type.user ) { + if ( actor.type.user?.suspended ) { + throw APIError.create('forbidden'); + } + context.set('user', actor.type.user); + } // === Populate Request === req.actor = actor; diff --git a/src/backend/src/modules/puterai/AIChatService.js b/src/backend/src/modules/puterai/AIChatService.js index 3d3564a45..0bad5e030 100644 --- a/src/backend/src/modules/puterai/AIChatService.js +++ b/src/backend/src/modules/puterai/AIChatService.js @@ -301,7 +301,6 @@ class AIChatService extends BaseService { let { test_mode, intended_service, response_metadata } = client_driver_call; const completionId = this.modules.cuid2(); - this.log.noticeme('AIChatService.complete', { intended_service, test_mode }); const svc_event = this.services.get('event'); const event = {