Merge pull request #91 from pixie-git/bugfix/PIX-106_clear-canvas-not-working

PIX-106 fix: improve lobby owner authorization for canvas clearing by…

Author: matteosusca

server/src/sockets/index.ts

@@ -81,11 +81,16 @@ export const setupSocket = (io: Server) => {
         if (!user || !user.id) return;
 
         const lobby = await LobbyService.getById(lobbyId);
-        if (!lobby || !lobby.owner) return;
+        if (!lobby) return;
 
-        const ownerId = (lobby.owner as any)._id ? (lobby.owner as any)._id.toString() : lobby.owner.toString();
+        let ownerId: string | null = null;
+        if (lobby.owner) {
+          ownerId = (lobby.owner as any)._id ? (lobby.owner as any)._id.toString() : lobby.owner.toString();
+        }
+
+        const isOwner = ownerId && ownerId === user.id;
 
-        if (ownerId !== user.id && !user.isAdmin) {
+        if (!isOwner && !user.isAdmin) {
           socket.emit(CONFIG.EVENTS.SERVER.ERROR, { message: "Only the lobby owner or admin can clear the canvas" });
           return;
         }