Merge pull request #3715 from ionfwsrijan/fix/quiz-auth-field-mismatch

fix: quiz auth field mismatch

Author: Premshaw23

app/api/quiz-sessions/[sessionId]/abandon/route.js

@@ -25,7 +25,8 @@ export const POST = withErrorHandler(async (req, { params }) => {
     });
   }
 
-  if (session.userId !== payload.uid) {
+  const sessionUserId = session.userId || session.firebaseUid;
+  if (sessionUserId !== payload.uid) {
     return new Response(JSON.stringify({ error: "Forbidden" }), {
       status: 403,
       headers: { "Content-Type": "application/json" },

app/api/quiz-sessions/[sessionId]/progress/route.js

@@ -25,7 +25,8 @@ export const GET = withErrorHandler(async (req, { params }) => {
     });
   }
 
-  if (session.userId !== payload.uid) {
+  const sessionUserId = session.userId || session.firebaseUid;
+  if (sessionUserId !== payload.uid) {
     return new Response(JSON.stringify({ error: "Forbidden" }), {
       status: 403,
       headers: { "Content-Type": "application/json" },

app/api/quiz-sessions/answer/route.js

@@ -25,7 +25,8 @@ export const POST = withErrorHandler(async (req) => {
     });
   }
 
-  if (session.userId !== payload.uid) {
+  const sessionUserId = session.userId || session.firebaseUid;
+  if (sessionUserId !== payload.uid) {
     return new Response(JSON.stringify({ error: "Forbidden" }), {
       status: 403,
       headers: { "Content-Type": "application/json" },

app/api/quiz-sessions/route.js

@@ -43,7 +43,7 @@ export async function POST(req) {
     const session = {
       _id: sessionId,
       quizId,
-      firebaseUid: decodedToken.uid,
+      userId: decodedToken.uid,
       createdAt: new Date(),
       expiresAt,
       answers: {},

app/api/quiz-sessions/submit/route.js

@@ -25,7 +25,8 @@ export const POST = withErrorHandler(async (req) => {
     });
   }
 
-  if (session.userId !== payload.uid) {
+  const sessionUserId = session.userId || session.firebaseUid;
+  if (sessionUserId !== payload.uid) {
     return new Response(JSON.stringify({ error: "Forbidden" }), {
       status: 403,
       headers: { "Content-Type": "application/json" },