From d00f6fa7de59bdbd30efe9ce824e795cf05616f4 Mon Sep 17 00:00:00 2001 From: PiR1 Date: Fri, 8 May 2026 23:28:34 +0200 Subject: [PATCH] fix(event): correct updating client access --- backend/src/routes/adminEvents.js | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/backend/src/routes/adminEvents.js b/backend/src/routes/adminEvents.js index 556630d0..fa238c13 100644 --- a/backend/src/routes/adminEvents.js +++ b/backend/src/routes/adminEvents.js @@ -1192,14 +1192,6 @@ router.put('/:id', adminAuth, requirePermission('events.edit'), requireEventOwne return res.status(400).json({ error: 'external_path is required when source_mode is reference' }); } - // Handle client access fields (#172) - if (Object.prototype.hasOwnProperty.call(updates, 'client_access_enabled')) { - updates.client_access_enabled = formatBoolean(updates.client_access_enabled); - // Auto-generate client share token when first enabling - if (parseBooleanInput(updates.client_access_enabled, false) && !event.client_share_token) { - updates.client_share_token = crypto.randomBytes(32).toString('hex'); - } - } if (Object.prototype.hasOwnProperty.call(updates, 'client_password') && updates.client_password) { updates.client_password_hash = await bcrypt.hash(updates.client_password, getBcryptRounds()); delete updates.client_password; @@ -1281,6 +1273,15 @@ router.put('/:id', adminAuth, requirePermission('events.edit'), requireEventOwne } } + // Handle client access fields (#172) + if (Object.prototype.hasOwnProperty.call(updates, 'client_access_enabled')) { + updates.client_access_enabled = formatBoolean(updates.client_access_enabled); + // Auto-generate client share token when first enabling + if (parseBooleanInput(updates.client_access_enabled, false) && !event.client_share_token) { + updates.client_share_token = crypto.randomBytes(32).toString('hex'); + } + } + // Update event await db('events') .where('id', id)