From e14d56ddb2eb2e92aa86796295b86e3b6ac52acf Mon Sep 17 00:00:00 2001
From: Eric Mc Sween <5454374+emcsween@users.noreply.github.com>
Date: Mon, 25 Aug 2025 10:27:01 -0400
Subject: [PATCH] Merge pull request #28089 from
 overleaf/dk-dsmp-post-chat-message

Add support for posting chat messages

GitOrigin-RevId: 817d723abf6309716c4cfa61e2c260cb7ace0bda
---
 .../src/Features/Authorization/PermissionsController.js    | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/services/web/app/src/Features/Authorization/PermissionsController.js b/services/web/app/src/Features/Authorization/PermissionsController.js
index 27b99081c6..1006c32224 100644
--- a/services/web/app/src/Features/Authorization/PermissionsController.js
+++ b/services/web/app/src/Features/Authorization/PermissionsController.js
@@ -99,11 +99,14 @@ function requirePermission(...requiredCapabilities) {
     if (!Features.hasFeature('saas')) {
       return next()
     }
-    if (!req.user) {
+    if (!req.user && !req.oauth_user) {
       return next(new Error('no user'))
     }
     try {
-      await assertUserPermissions(req.user, requiredCapabilities)
+      await assertUserPermissions(
+        req.user || req.oauth_user,
+        requiredCapabilities
+      )
       next()
     } catch (error) {
       next(error)