Fixed payload check

error_log_api/index.js

@@ -58,7 +58,7 @@ function verifyAdmin(req, res, next) {
 
   try {
     const payload = jwt.verify(auth.slice(7), JWT_SECRET);
-    if (!payload?.isAdmin) {
+    if (!payload?.user.isAdmin) {
       return res.status(403).json({ error: toFriendlyError(403) });
     }
 

monitoring_ui/src/App.jsx

@@ -57,7 +57,12 @@ const healthPaths = {
   errors: "/health",
 };
 const testerRoutes = [
-  { service: "auth", method: "POST", path: "/login", label: "Login (userCode + password)" },
+  {
+    service: "auth",
+    method: "POST",
+    path: "/login",
+    label: "Login (userCode + password)",
+  },
   { service: "auth", method: "GET", path: "/me", label: "Current session" },
   {
     service: "employee",
@@ -108,8 +113,8 @@ function App() {
   const [token, setToken] = useState(
     () => localStorage.getItem("transit-monitor-token") || "",
   );
-  const [user, setUser] = useState(
-    () => JSON.parse(localStorage.getItem("transit-monitor-user") || "null"),
+  const [user, setUser] = useState(() =>
+    JSON.parse(localStorage.getItem("transit-monitor-user") || "null"),
   );
   const [health, setHealth] = useState({});
   const [history, setHistory] = useState({});
@@ -129,7 +134,8 @@ function App() {
   const [loginLoading, setLoginLoading] = useState(false);
   const [loginError, setLoginError] = useState("");
 
-  const login = useCallback(async (userCode, password) => {
+  const login = useCallback(
+    async (userCode, password) => {
       const url = urls.auth;
       if (!url) {
         setLoginError("Auth API URL not configured");
@@ -157,7 +163,9 @@ function App() {
       } finally {
         setLoginLoading(false);
       }
-  }, [urls.auth]);
+    },
+    [urls.auth],
+  );
 
   const logout = useCallback(() => {
     setToken("");
@@ -590,7 +598,9 @@ function Docs() {
                 <summary>API Routes</summary>
                 <ul>
                   {meta.routes.map((route) => (
-                    <li key={route}><code>{route}</code></li>
+                    <li key={route}>
+                      <code>{route}</code>
+                    </li>
                   ))}
                 </ul>
               </details>
@@ -855,7 +865,11 @@ function Connections({ urls, token, user, login, logout, save, loginLoading }) {
               />
             </label>
             {loginError && <div className="login-error">{loginError}</div>}
-            <button type="submit" className="run-button save-button" disabled={loginLoading}>
+            <button
+              type="submit"
+              className="run-button save-button"
+              disabled={loginLoading}
+            >
               {loginLoading ? "Logging in..." : "Login"}
             </button>
           </form>
@@ -898,10 +912,18 @@ function Connections({ urls, token, user, login, logout, save, loginLoading }) {
       </div>
       <div className="user-info">
         <h3>Logged in as</h3>
-        <p><strong>User Code:</strong> {user?.userCode}</p>
-        <p><strong>Role:</strong> {user?.job}</p>
-        <p><strong>Admin:</strong> {user?.isAdmin ? "Yes" : "No"}</p>
-        <button className="ghost-button" onClick={logout}>Logout</button>
+        <p>
+          <strong>User Code:</strong> {user?.userCode}
+        </p>
+        <p>
+          <strong>Role:</strong> {user?.job}
+        </p>
+        <p>
+          <strong>Admin:</strong> {user?.isAdmin ? "Yes" : "No"}
+        </p>
+        <button className="ghost-button" onClick={logout}>
+          Logout
+        </button>
       </div>
       <button
         className="run-button save-button"