Fix isAccessAllowed default (#4923)

keystonejs · Feb 23, 2021 · 1c5a399 · 1c5a399 · vercel · Feb 23, 2021
1 parent 739cf34
commit 1c5a399
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/.changeset/eighty-lies-hide.md b/.changeset/eighty-lies-hide.md
@@ -0,0 +1,6 @@
+---
+'@keystone-next/admin-ui': major
+'@keystone-next/keystone': major
+---
+
+Fixed isAccessAllowed default so that if a session strategy is not used, access is always allowed to the Admin UI rather than never allowing access
diff --git a/packages-next/admin-ui/src/system/createAdminUIServer.ts b/packages-next/admin-ui/src/system/createAdminUIServer.ts
@@ -29,7 +29,9 @@ export const createAdminUIServer = async (
     });
     const isValidSession = ui?.isAccessAllowed
       ? await ui.isAccessAllowed(context)
-      : context.session !== undefined;
+      : sessionStrategy
+      ? context.session !== undefined
+      : true;
     const maybeRedirect = await ui?.pageMiddleware?.({
       req,
       session: context.session,