Changeset e9229f2 in Klonkt

Timestamp:

06/16/2026 06:45:02 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

1be21ba

Parents:

029f047

Message:

Phase 4: Fan login (Google) behind premium gate

fanLoginReady() = googleConfigured() && premiumUnlocked(). The "Sign in
with Google" button, /auth/google-start, and the callback are now gated on
this (premium off = freely available, demos unchanged; on = Patreon
required).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@…>

File:

• src/routes/auth.js (modified) (5 diffs)

src/routes/auth.js

@@ -8 +8 @@
 import { safeNext } from '../middleware/auth.js';
 import { googleConfigured, authorizeUrl, exchangeCode, fetchUserinfo } from '../config/google.js';
+import { premiumUnlocked } from '../services/PatreonService.js';
+
+// Fan-login (luisteraars inloggen met Google om te reageren) is een premium-
+// feature: beschikbaar als Google is ingesteld ÉN de premium-laag ontgrendeld is
+// (premium uit = vrij; aan = Patreon vereist).
+function fanLoginReady() {
+  return googleConfigured() && premiumUnlocked();
+}
 import { mailerConfigured, sendMail } from '../config/mailer.js';
 
@@ -47 +55 @@
     success: req.query.success || null,
     username: '',
-    googleReady: googleConfigured(),
+    googleReady: fanLoginReady(),
     next,
   });
@@ -60 +68 @@
     return renderPage(req, res, 'pages/auth-login', {
       pageTitle: 'Inloggen', bodyClass: 'on-special',
-      error, success: null, username: username || '', googleReady: googleConfigured(), next,
+      error, success: null, username: username || '', googleReady: fanLoginReady(), next,
     });
   };
@@ -226 +234 @@
 // Per-instance, eigen Google-client. Geeft ALTIJD rol member — nooit beheer.
 router.get('/google', (req, res) => {
-  if (!googleConfigured()) {
-    return res.redirect('/auth/login?error=' + encodeURIComponent('Google-login is op deze site niet ingesteld.'));
+  if (!fanLoginReady()) {
+    return res.redirect('/auth/login?error=' + encodeURIComponent('Inloggen met Google is op deze site niet beschikbaar.'));
   }
   const state = crypto.randomBytes(16).toString('hex');
@@ -248 +256 @@
 router.get('/google/callback', async (req, res) => {
   const fail = (msg) => res.redirect('/auth/login?error=' + encodeURIComponent(msg));
+  if (!fanLoginReady()) return fail('Inloggen met Google is op deze site niet beschikbaar.');
   try {
     const { code, state } = req.query;