From 3c4655a26ebd7c61f237e61b81726da0064f79b0 Mon Sep 17 00:00:00 2001
From: Prayuj Tuli <prayujtuli@hotmail.com>
Date: Mon, 24 Aug 2026 23:21:16 -0400
Subject: [PATCH] fix(auth): reject stale user sessions

---
 src/routes/+page.svelte | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
index 3153efd..c76106f 100644
--- a/src/routes/+page.svelte
+++ b/src/routes/+page.svelte
@@ -28,6 +28,7 @@
 
       const response = await userClient.getUser({ userId: { value: id } });
       const user = response.user!;
+      if (!user.userId?.value || user.userId.value !== id) throw new Error('Stale session');
       userIdStore.set(user.userId?.value);
       emailStore.set(user.email);
       usernameStore.set(user.username);