Changeset d48ea02 in Klonkt

Timestamp:

07/21/2026 01:38:37 AM (7 weeks ago)

Author:

Robin <roboburr@…>

Branches:

main

Children:

e685f55

Parents:

6cbd014

git-author:

Robin <roboburr@…> (07/21/2026 01:38:23 AM)

git-committer:

Robin <roboburr@…> (07/21/2026 01:38:37 AM)

Message:

Fix: paid gate wins from the fan gate (no more login page on paid posts)

A post that is both fan_only and paid sent anonymous visitors to the
fan login gate, because the fan gate was checked first. They never saw
the unlock button. A paid post unlocks with a passkey, not with a
Klonkt-login, so the paid gate now runs first; the fan gate stays as-is
for posts that are only fan_only.

Changed files:
src/routes/posts.js

• paid-gate block moved above the fan-gate block, comment explains the order

-robo
Co-Authored-By: Claude Opus 4.8 <noreply@…>

File:

• src/routes/posts.js (modified) (2 diffs)

src/routes/posts.js

@@ -1232 +1232 @@
   }
 
+  // Paid gate (klonkt-demo-aki): a paid post shows only a teaser to anyone who
+  // is not the owner/editor. Checked BEFORE the fan gate: a post that is both
+  // fan_only and paid unlocks with a passkey, not with a Klonkt-login, so the
+  // paid gate wins (otherwise anonymous visitors land on the login gate and
+  // never see the unlock button).
+  const canEditThis = req.session?.user && PermissionsService.canEditPost(req.session.user, post, site);
+  if (post.paid && !canEditThis) {
+    const { newerPost, olderPost } = postNeighbors(site, post, res.locals.tenancy === 'hub');
+    return renderPage(req, res, 'pages/paid-gate', {
+      pageTitle: post.title || 'Voor supporters',
+      bodyClass: 'on-special',
+      pgTitle: post.title || '',
+      pgTeaser: paidTeaser(post),
+      pgCents: post.paid_min_cents || paidDefaultMinCents(site.id),
+      pgSlug: post.slug,
+      newerPost,
+      olderPost,
+    });
+  }
+
   // Fan-only preview (premium #3): full content only for logged-in fans.
   // Anonymous visitors get a clean login gate instead of the content (the title/
@@ -1244 +1264 @@
       fgTitle: post.title || '',
       fgNext: (res.locals.siteUrlBase || '') + '/' + post.slug,
-      newerPost,
-      olderPost,
-    });
-  }
-
-  // Paid gate (klonkt-demo-aki): a paid post shows only a teaser to anyone who
-  // is not the owner/editor. The passkey unlock arrives in slices 3-4; for now
-  // the owner previews the full post, everyone else sees the teaser + notice.
-  const canEditThis = req.session?.user && PermissionsService.canEditPost(req.session.user, post, site);
-  if (post.paid && !canEditThis) {
-    const { newerPost, olderPost } = postNeighbors(site, post, res.locals.tenancy === 'hub');
-    return renderPage(req, res, 'pages/paid-gate', {
-      pageTitle: post.title || 'Voor supporters',
-      bodyClass: 'on-special',
-      pgTitle: post.title || '',
-      pgTeaser: paidTeaser(post),
-      pgCents: post.paid_min_cents || paidDefaultMinCents(site.id),
-      pgSlug: post.slug,
       newerPost,
       olderPost,