codecret | Software Engineer Comments

codecret | Software Engineer

Explore posts from servers

CC#JCHJava Community | Help. Code. Learn.TtRPC DTDrizzle Team BABetter Auth

Posts Comments

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

403 error when listing user from superadmin role

news?

6 replies

DTDrizzle Team

•Created by rykr on 3/21/2025 in #help

do I still need to use drizzle-kit?

drizzle-kit doesnt play a role in relations, relations are just high level of abstractions, it's the way to run migrations and perform actions on table such as creating updating delete tables columns operations etc.

2 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

403 error when listing user from superadmin role

im not sure if this is the right approach but still same error

const data = await auth.api.userHasPermission({ // { error: null, success: true }
    body: {
      role: "superadmin",
      permission: {
        user: ["list"],
      },
    },
  });
  async function fetchUsers() { // returning Error fetching users: [Error [APIError]: You are not allowed to list users] 403 
    try {
      const newData = await auth.api.listUsers({
        headers: await headers(),
        query: {
          limit: 10,
          sortBy: "createdAt",
          sortDirection: "desc",
        },
      });
      console.log("Fetched Users:", newData);
    } catch (error) {
      console.error("Error fetching users:", error);
    }
  }

  fetchUsers();
  console.log(data);

const data = await auth.api.userHasPermission({ // { error: null, success: true }
    body: {
      role: "superadmin",
      permission: {
        user: ["list"],
      },
    },
  });
  async function fetchUsers() { // returning Error fetching users: [Error [APIError]: You are not allowed to list users] 403 
    try {
      const newData = await auth.api.listUsers({
        headers: await headers(),
        query: {
          limit: 10,
          sortBy: "createdAt",
          sortDirection: "desc",
        },
      });
      console.log("Fetched Users:", newData);
    } catch (error) {
      console.error("Error fetching users:", error);
    }
  }

  fetchUsers();
  console.log(data);

6 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

"better-auth": "1.2.0",

"better-auth": "1.2.0",

15 replies

BABetter Auth

•Created by jirik9 on 3/17/2025 in #help

How to log sign-in, sign-out, and errors?

additionally you can setup a middleware to only check for the existence of a session cookie to handle redirection.

import { NextRequest, NextResponse } from "next/server";
import { getSessionCookie } from "better-auth/cookies";
 
export async function middleware(request: NextRequest) {
    const sessionCookie = getSessionCookie(request, {
        // Optionally pass config if cookie name, prefix or useSecureCookies option is customized in auth config.
        cookieName: "session_token",
        cookiePrefix: "better-auth",
        useSecureCookies: true,
    });
 
    if (!sessionCookie) {
        return NextResponse.redirect(new URL("/", request.url));
    }
 
    return NextResponse.next();
}
 
export const config = {
    matcher: ["/dashboard"], // Specify the routes the middleware applies to
}

import { NextRequest, NextResponse } from "next/server";
import { getSessionCookie } from "better-auth/cookies";
 
export async function middleware(request: NextRequest) {
    const sessionCookie = getSessionCookie(request, {
        // Optionally pass config if cookie name, prefix or useSecureCookies option is customized in auth config.
        cookieName: "session_token",
        cookiePrefix: "better-auth",
        useSecureCookies: true,
    });
 
    if (!sessionCookie) {
        return NextResponse.redirect(new URL("/", request.url));
    }
 
    return NextResponse.next();
}
 
export const config = {
    matcher: ["/dashboard"], // Specify the routes the middleware applies to
}

6 replies

BABetter Auth

•Created by jirik9 on 3/17/2025 in #help

How to log sign-in, sign-out, and errors?

you can use authClient from client components , here is the implementation

 async function onSubmit(event: React.SyntheticEvent) {
    event.preventDefault();
    setIsLoading(true);
    await authClient.signIn.username(
      {
        username,
        password,
      },
      {
        onSuccess: (_data) => {
          toast({
            variant: "default",
            title: "Sign In Successfully",
            duration: 2000,
          });
          router.push("/dashboard");
        },
        onError: (ctx) => {
          toast({
            variant: "destructive",
            title: ctx.error?.message || "An error occurred",
            duration: 2000,
          });
        },
      }
    );

    setIsLoading(false);
  }

 async function onSubmit(event: React.SyntheticEvent) {
    event.preventDefault();
    setIsLoading(true);
    await authClient.signIn.username(
      {
        username,
        password,
      },
      {
        onSuccess: (_data) => {
          toast({
            variant: "default",
            title: "Sign In Successfully",
            duration: 2000,
          });
          router.push("/dashboard");
        },
        onError: (ctx) => {
          toast({
            variant: "destructive",
            title: ctx.error?.message || "An error occurred",
            duration: 2000,
          });
        },
      }
    );

    setIsLoading(false);
  }

6 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

this. is returning. 403 !

15 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

any help? i setted up superadmin as role in database

 const response = await authClient.admin.listUsers({
          query: {
            limit: 10,
            sortBy: "createdAt",
            sortDirection: "desc",
          },
        });

 const response = await authClient.admin.listUsers({
          query: {
            limit: 10,
            sortBy: "createdAt",
            sortDirection: "desc",
          },
        });

15 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

thanks for answering btw

15 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

and how can i use that , by just setting the role field as superadmin ?

15 replies

BABetter Auth

•Created by Ashborn013H on 3/12/2025 in #help

RBAC

how did you fix it ?

8 replies

BABetter Auth

•Created by Ashborn013H on 3/12/2025 in #help

RBAC

https://discord.com/channels/1288403910284935179/1351365068268376094

8 replies

BABetter Auth

•Created by Ashborn013H on 3/12/2025 in #help

RBAC

im facing tthe same problem

8 replies

BABetter Auth

•Created by Ashborn013H on 3/12/2025 in #help

RBAC

fixed?

8 replies

BABetter Auth

•Created by jirik9 on 3/17/2025 in #help

How to log sign-in, sign-out, and errors?

https://www.better-auth.com/docs/basic-usage#server-side-authentication refer to this

6 replies

BABetter Auth

•Created by jirik9 on 3/17/2025 in #help

How to log sign-in, sign-out, and errors?

if you are using server components use auth instance, if you are using client component use authClient instance

6 replies

BABetter Auth

•Created by codecret | Software Engineer on 3/18/2025 in #help

you are not allowed to list users 403 error

i made sure that

 const canListUsers = authClient.admin.checkRolePermission({
          permission: {
            user: ["list"],
          },
          role: "superadmin",
        });

 const canListUsers = authClient.admin.checkRolePermission({
          permission: {
            user: ["list"],
          },
          role: "superadmin",
        });