dont include posture in repsonse if not licensed or subscribed

This commit is contained in:
miloschwartz
2026-01-22 10:36:52 -08:00
parent 9ef93df54f
commit 00fc1da33c

View File

@@ -12,6 +12,7 @@ import { fromError } from "zod-validation-error";
import { OpenAPITags, registry } from "@server/openApi"; import { OpenAPITags, registry } from "@server/openApi";
import { getUserDeviceName } from "@server/db/names"; import { getUserDeviceName } from "@server/db/names";
import { build } from "@server/build"; import { build } from "@server/build";
import { isLicensedOrSubscribed } from "@server/lib/isLicencedOrSubscribed";
const getClientSchema = z.strictObject({ const getClientSchema = z.strictObject({
clientId: z clientId: z
@@ -250,12 +251,18 @@ export async function getClient(
: null; : null;
// Build posture data if available (platform-specific) // Build posture data if available (platform-specific)
// Only return posture data if org is licensed/subscribed
let postureData: PostureData | null = null; let postureData: PostureData | null = null;
if (build !== "oss") { if (build !== "oss") {
postureData = getPlatformPostureData( const isOrgLicensed = await isLicensedOrSubscribed(
client.currentFingerprint?.platform || null, client.clients.orgId
client.currentFingerprint
); );
if (isOrgLicensed) {
postureData = getPlatformPostureData(
client.currentFingerprint?.platform || null,
client.currentFingerprint
);
}
} }
const data: GetClientResponse = { const data: GetClientResponse = {