Switch to type guard

TheodoreSpeaks · TheodoreSpeaks · commit ff5c846ad779 · 2026-04-08T15:58:41.000-07:00
diff --git a/apps/sim/app/api/auth/socket-token/route.ts b/apps/sim/app/api/auth/socket-token/route.ts
@@ -25,8 +25,12 @@ export async function POST() {
   } catch (error) {
     // better-auth's sessionMiddleware throws APIError("UNAUTHORIZED") with no message
     // when the session is missing/expired — surface this as a 401, not a 500.
-    const apiError = error as { statusCode?: number; status?: string }
-    if (apiError.statusCode === 401 || apiError.status === 'UNAUTHORIZED') {
+    if (
+      error instanceof Error &&
+      ('statusCode' in error || 'status' in error) &&
+      ((error as Record<string, unknown>).statusCode === 401 ||
+        (error as Record<string, unknown>).status === 'UNAUTHORIZED')
+    ) {
       logger.warn('Socket token request with invalid/expired session')
       return NextResponse.json({ error: 'Authentication required' }, { status: 401 })
     }
