From 9a88394efe9523161f04809bc97a54f83d60c1c9 Mon Sep 17 00:00:00 2001
From: Fred KISSIE <fredkiss3@gmail.com>
Date: Thu, 14 May 2026 21:17:58 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=82=20gate=20label=20endpoints=20behin?=
 =?UTF-8?q?g=20subscription?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server/private/middlewares/verifySubscription.ts | 2 +-
 server/private/routers/external.ts               | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/server/private/middlewares/verifySubscription.ts b/server/private/middlewares/verifySubscription.ts
index 27bd25dfe..92d5d9cfe 100644
--- a/server/private/middlewares/verifySubscription.ts
+++ b/server/private/middlewares/verifySubscription.ts
@@ -25,7 +25,7 @@ export function verifyValidSubscription(tiers: Tier[]) {
         next: NextFunction
     ): Promise<any> {
         try {
-            if (build != "saas") {
+            if (build !== "saas") {
                 return next();
             }
 
diff --git a/server/private/routers/external.ts b/server/private/routers/external.ts
index 8745dffdf..481e3a302 100644
--- a/server/private/routers/external.ts
+++ b/server/private/routers/external.ts
@@ -737,6 +737,7 @@ authenticated.get(
     "/org/:orgId/labels",
     verifyValidLicense,
     verifyOrgAccess,
+    verifyValidSubscription(tierMatrix.labels),
     verifyUserHasAction(ActionsEnum.listOrgLabels),
     labels.listOrgLabels
 );
@@ -745,6 +746,7 @@ authenticated.post(
     "/org/:orgId/labels",
     verifyValidLicense,
     verifyOrgAccess,
+    verifyValidSubscription(tierMatrix.labels),
     verifyUserHasAction(ActionsEnum.createOrgLabel),
     labels.createOrgLabel
 );
@@ -753,6 +755,7 @@ authenticated.patch(
     "/org/:orgId/label/:labelId",
     verifyValidLicense,
     verifyOrgAccess,
+    verifyValidSubscription(tierMatrix.labels),
     verifyUserHasAction(ActionsEnum.updateOrgLabel),
     labels.updateOrgLabel
 );
@@ -769,6 +772,7 @@ authenticated.put(
     "/org/:orgId/label/:labelId/attach",
     verifyValidLicense,
     verifyOrgAccess,
+    verifyValidSubscription(tierMatrix.labels),
     verifyUserHasAction(ActionsEnum.attachLabelToItem),
     labels.attachLabelToItem
 );
@@ -777,6 +781,7 @@ authenticated.put(
     "/org/:orgId/label/:labelId/detach",
     verifyValidLicense,
     verifyOrgAccess,
+    verifyValidSubscription(tierMatrix.labels),
     verifyUserHasAction(ActionsEnum.detachLabelFromItem),
     labels.detachLabelFromItem
 );