refactor: extraire la vérification JWT/payload en policy partagée

2026-07-04 10:04:00 +04:00
parent 1562ecd706
commit e515944fb9
11 changed files with 122 additions and 107 deletions
@@ -12,20 +12,6 @@ module.exports = createCoreController('api::artiste.artiste', ({strapi}) => ({
    const {body} = ctx.request
    let {data} = body

-    if (ctx.request && ctx.request.header && ctx.request.header.authorization) {
-      try {
-        const {id} = await strapi.plugins[
-          'users-permissions'
-        ].services.jwt.getToken(ctx)
-
-        if (id !== data.user.id) {
-          return ctx.unauthorized('Opération non autorisée')
-        }
-      } catch (err) {
-        return ctx.unauthorized('Opération non autorisée')
-      }
-    }
-
    const user = await strapi.documents('plugin::users-permissions.user').findOne({
      documentId: body.data.user.documentId
    })