diff --git a/src/routes/(pages)/setup/create-admin-account/+page.server.ts b/src/routes/(pages)/setup/create-admin-account/+page.server.ts index 5eb2cad..0d851e7 100644 --- a/src/routes/(pages)/setup/create-admin-account/+page.server.ts +++ b/src/routes/(pages)/setup/create-admin-account/+page.server.ts @@ -25,6 +25,13 @@ export const actions: Actions = { }); } + if (await UserService.adminExists()) { + log.error("Create global admin forbidden. Admin already exists.", { errors: form.errors }); + return fail(403, { + form: { ...form, data: { ...form.data, type: "passkey" } }, + }); + } + // IMPORTANT: Verify passkey BEFORE creating user to avoid orphaned users let verificationResult: | { credentialID: string; credentialPublicKey: string; counter: number }