fix: enforce representation blob ownership and secure SSR access

2026-11-06 17:05:40 +00:00
parent 946d361a67
commit 1377aebc89
15 changed files with 447 additions and 23 deletions
@@ -120,7 +120,9 @@ export const loadRepresentationBootstrap = async ({ ctx }) => {

    const [accountDetails, myRepresentations] = await Promise.all([
        getPersonalAccount(loggedInUser),
-        getRepsFromBlob(thisSession.user.id)
+        getRepsFromBlob(thisSession.user.id, {
+            headers: { Cookie: ctx.req?.headers?.cookie || "" }
+        })
    ]);

    const myRepresentationsDetails = await getDetails(