Jacob Fletcher afcc970e36 fix(next): ensures req.locale is populated before running access control (#10533) ...

Fixes #10529. The `req.locale` property within collection and global
access control functions does not reflect the current locale. This was
because we were attaching the locale to the req only _after_ running
`payload.auth`, which attempts to get access control without a
fully-formed req. The fix is to first authenticate the user using the
`executeAuthStrategies` operation directly, then determine the request
locale with that user, and finally get access results with the proper
locale.

2025-01-13 10:33:27 -05:00

2.5 KiB

Raw Permalink Blame History

View Raw