fix(mana-auth): remove debug log, finalize EMAIL_NOT_VERIFIED detection

APIError.status is string 'FORBIDDEN', body.code is 'EMAIL_NOT_VERIFIED'.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Till JS 2026-03-31 18:07:57 +02:00
parent d044afec2f
commit bdf76cb24d

View file

@ -131,22 +131,10 @@ export function createAuthRoutes(
return c.json(response);
} catch (error) {
console.log(
'[login debug] caught error:',
JSON.stringify({
msg: (error as any)?.message,
status: (error as any)?.status,
body: (error as any)?.body,
name: (error as any)?.name,
})
);
// Better Auth throws APIError.from("FORBIDDEN", "EMAIL_NOT_VERIFIED") for unverified emails
// Better Auth throws APIError (status="FORBIDDEN", body.code="EMAIL_NOT_VERIFIED")
const isEmailNotVerified =
(error as any)?.status === 403 ||
(error as any)?.body?.code === 'EMAIL_NOT_VERIFIED' ||
String((error as any)?.message ?? error)
.toLowerCase()
.includes('not verified');
(error as any)?.status === 'FORBIDDEN';
if (isEmailNotVerified) {
return c.json({ error: 'Email not verified', code: 'EMAIL_NOT_VERIFIED' }, 403);
}