remove faulty auth checks:

Author: icecrasher321

apps/sim/app/api/tools/microsoft_planner/tasks/route.ts

@@ -58,19 +58,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-
-    if (credential.userId !== session.user.id) {
-      logger.warn(`[${requestId}] Unauthorized credential access attempt`, {
-        credentialUserId: credential.userId,
-        requestUserId: session.user.id,
-      })
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
 

apps/sim/app/api/tools/onedrive/files/route.ts

@@ -60,18 +60,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-    if (credential.userId !== session.user.id) {
-      logger.warn(`[${requestId}] Unauthorized credential access attempt`, {
-        credentialUserId: credential.userId,
-        requestUserId: session.user.id,
-      })
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
     if (!accessToken) {

apps/sim/app/api/tools/onedrive/folder/route.ts

@@ -48,14 +48,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-    if (credential.userId !== session.user.id) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
     if (!accessToken) {

apps/sim/app/api/tools/onedrive/folders/route.ts

@@ -54,14 +54,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-    if (credential.userId !== session.user.id) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
     if (!accessToken) {

apps/sim/app/api/tools/sharepoint/site/route.ts

@@ -48,14 +48,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-    if (credential.userId !== session.user.id) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
     if (!accessToken) {

apps/sim/app/api/tools/sharepoint/sites/route.ts

@@ -53,14 +53,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-    if (credential.userId !== session.user.id) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
     if (!accessToken) {

apps/sim/app/api/tools/wealthbox/item/route.ts

@@ -80,19 +80,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-
-    if (credential.userId !== session.user.id) {
-      logger.warn(`[${requestId}] Unauthorized credential access attempt`, {
-        credentialUserId: credential.userId,
-        requestUserId: session.user.id,
-      })
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )
 

apps/sim/app/api/tools/wealthbox/items/route.ts

@@ -80,19 +80,11 @@ export async function GET(request: NextRequest) {
       return NextResponse.json({ error: 'Credential not found' }, { status: 404 })
     }
 
-    const credential = credentials[0]
-
-    if (credential.userId !== session.user.id) {
-      logger.warn(`[${requestId}] Unauthorized credential access attempt`, {
-        credentialUserId: credential.userId,
-        requestUserId: session.user.id,
-      })
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 403 })
-    }
+    const accountRow = credentials[0]
 
     const accessToken = await refreshAccessTokenIfNeeded(
       resolved.accountId,
-      session.user.id,
+      accountRow.userId,
       requestId
     )