How to check permissions on server side

Heyells · 2025-02-20T20:52:45.592Z

Hello, I created custom roles and rights and I would like to check permission but if I use `auth.api.hasPermission` , i cannot use `project:["my_right"]` So i tried to use authClient but it doesn't work either. What should i do ?

L

lonelyplanet•2/20/25, 10:56 PM

What was the full method call you did for server side

L

lonelyplanet•2/20/25, 10:56 PM

https://www.better-auth.com/docs/concepts/api#calling-api-endpoints-on-the-server

API | Better Auth

Better Auth API.

L

lonelyplanet•2/20/25, 10:59 PM

//server,ts
import { betterAuth } from "better-auth";
 
export const auth = betterAuth({
    //...
})

//get the headers of the current request
const requestHeaders = ...forward_the_current_server_requests_headers
 
// calling hasPermission  on the server
await auth.api.hasPermission({
    headers: requestHeaders
    body: {
        project:["my_right"] 
    }

})

//server,ts
import { betterAuth } from "better-auth";
 
export const auth = betterAuth({
    //...
})

//get the headers of the current request
const requestHeaders = ...forward_the_current_server_requests_headers
 
// calling hasPermission  on the server
await auth.api.hasPermission({
    headers: requestHeaders
    body: {
        project:["my_right"] 
    }

})

//server,ts
import { betterAuth } from "better-auth";
 
export const auth = betterAuth({
    //...
})

//get the headers of the current request
const requestHeaders = ...forward_the_current_server_requests_headers
 
// calling hasPermission  on the server
await auth.api.hasPermission({
    headers: requestHeaders
    body: {
        project:["my_right"] 
    }

})

//server,ts
import { betterAuth } from "better-auth";
 
export const auth = betterAuth({
    //...
})

//get the headers of the current request
const requestHeaders = ...forward_the_current_server_requests_headers
 
// calling hasPermission  on the server
await auth.api.hasPermission({
    headers: requestHeaders
    body: {
        project:["my_right"] 
    }

})

L

lonelyplanet•2/20/25, 10:59 PM

Im not sure exactly how sveltekit regarding headers

L

lonelyplanet•2/20/25, 11:00 PM

But have a solid look at the documentation the API page is quite nice

R

rtmorgan•2/21/25, 12:51 AM

Also, the 'Access Control Usage' section of the Organization plugin's docs has an example that could help https://www.better-auth.com/docs/plugins/organization#usage

With changes from that doc to account for getting headers from the PageServerLoad event :

auth.api.hasPermission({
        headers: event.request.headers,
        body: {
            permission: {
                project: ["create"] // This must match the structure in your access control
            }
        }
    });

auth.api.hasPermission({
        headers: event.request.headers,
        body: {
            permission: {
                project: ["create"] // This must match the structure in your access control
            }
        }
    });

auth.api.hasPermission({
        headers: event.request.headers,
        body: {
            permission: {
                project: ["create"] // This must match the structure in your access control
            }
        }
    });

auth.api.hasPermission({
        headers: event.request.headers,
        body: {
            permission: {
                project: ["create"] // This must match the structure in your access control
            }
        }
    });

You should be able to use something similar with your 'makeOrder' action instead of the example's 'create' action.

H

HeyellsOP•2/21/25, 5:18 AM

I cannot make it work

H

HeyellsOP•2/21/25, 5:18 AM

Here is what error I get.

H

HeyellsOP•2/21/25, 10:42 AM

@lonelyplanet @rtmorgan

R

rtmorgan•2/21/25, 5:04 PM

@roze789 could you provide more details on how you assigned the role and what role you assigned to the user you're authenticating as? thank you

H

HeyellsOP•2/21/25, 6:46 PM

yes, my user has admin role

H

HeyellsOP•2/21/25, 6:46 PM

R

rtmorgan•2/21/25, 7:15 PM

Your earlier screenshots showed customizations for the existing role 'Admin'. Could you confirm that you merged the roles' permissions set with the default roles as covered in the custom permissions step 2 https://www.better-auth.com/docs/plugins/organization#create-roles ?

It could be that the Admin role statements are not correctly established and evaluated.

Rrtmorgan Your earlier screenshots showed customizations for the existing role 'Admin'. C...

H

HeyellsOP•2/21/25, 7:27 PM

I didn't, I created my own roles permissions for each one (organization, members, invitation, project)

R

rtmorgan•2/21/25, 7:42 PM

What do the member records look like in table 'member'? Is there a valid record for a organization member with role 'admin'?

H

HeyellsOP•2/22/25, 4:56 AM

Yes, i changed both

H

HeyellsOP•2/22/25, 4:56 AM

H

HeyellsOP•2/22/25, 4:57 AM

H

HeyellsOP•2/22/25, 3:52 PM

But what i dont understand is why I created those rights only on the authClient

H

HeyellsOP•2/22/25, 3:53 PM

authClient cannot be called in the server ?

H

HeyellsOP•2/22/25, 5:15 PM

ok I forget to add those roles in auth.ts ...

H

HeyellsOP•2/22/25, 5:15 PM

sorry my bad

R

RTMorgan•2/23/25, 5:38 PM

No prob - hopefully that gets it working

How to check permissions on server side

Similar Threads

Similar Threads

Similar Threads