From 370ba3406f271c6ecb31f30960816a140c794e39 Mon Sep 17 00:00:00 2001
From: Pascal Syma <p.syma@appfarms.com>
Date: Thu, 30 Jul 2026 22:33:47 +0200
Subject: [PATCH] refactor(hunt): replace admin middleware with auth and
 implement membership state

- Change middleware from 'admin' to 'auth' on hunt and quest admin pages
- Add global hunt store to track current hunt ID and membership status
- Use hunt store membership state to conditionally display admin UI elements
- Handle fetch errors gracefully with alerts and back navigation buttons
- Update admin UI logic to depend on membership state instead of user role
- Add membership state update after API calls in hunt, quest, teams, and admin pages
- Refactor UI templates to show error messages when fetch fails
- Centralize membership logic for better authorization control in frontend
---
 app/layouts/default.vue                       |  15 +-
 .../hunt/[huntSlug]/[questSlug]/admin.vue     | 104 +++--
 .../hunt/[huntSlug]/[questSlug]/index.vue     |  15 +-
 app/pages/hunt/[huntSlug]/admin.vue           | 415 +++++++++---------
 app/pages/hunt/[huntSlug]/index.vue           |   4 +
 app/pages/hunt/[huntSlug]/teams.vue           |  45 +-
 app/stores/hunt.ts                            |  14 +
 7 files changed, 351 insertions(+), 261 deletions(-)
 create mode 100644 app/stores/hunt.ts

diff --git a/app/layouts/default.vue b/app/layouts/default.vue
index 9cf1f27..8b9263c 100644
--- a/app/layouts/default.vue
+++ b/app/layouts/default.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import { sluggy } from '#imports';
+import { useHuntStore } from '~/stores/hunt';
 import { useTitleStore } from '~/stores/title';
 
 const { loggedIn, clear, user } = useUserSession();
@@ -8,10 +9,18 @@ const localePath = useLocalePath();
 const route = useRoute();
 const breakpoints = useBreakpoint();
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
 
 const isSidebarVisible = ref(breakpoints.mdUp);
 
 const slugs = computed(() => checkSlug(route.params));
+
+const isHuntAdmin = computed(
+  () =>
+    slugs.value?.huntSlug !== undefined &&
+    huntStore.huntId === slugs.value.huntSlug.id &&
+    huntStore.isMember
+);
 </script>
 
 <template>
@@ -75,7 +84,7 @@ const slugs = computed(() => checkSlug(route.params));
           </VaSidebarItemContent>
         </VaSidebarItem>
         <VaSidebarItem
-          v-if="slugs?.huntSlug && user?.role === 'ADMIN'"
+          v-if="slugs?.huntSlug && isHuntAdmin"
           text-color="danger"
           hover-color="danger"
           active-color="onDanger"
@@ -90,7 +99,7 @@ const slugs = computed(() => checkSlug(route.params));
           </VaSidebarItemContent>
         </VaSidebarItem>
         <VaSidebarItem
-          v-if="slugs?.huntSlug && user?.role === 'ADMIN'"
+          v-if="slugs?.huntSlug && isHuntAdmin"
           text-color="danger"
           hover-color="danger"
           active-color="onDanger"
@@ -125,7 +134,7 @@ const slugs = computed(() => checkSlug(route.params));
           </VaSidebarItemContent>
         </VaSidebarItem>
         <VaSidebarItem
-          v-if="slugs?.huntSlug && slugs?.questSlug && user?.role === 'ADMIN'"
+          v-if="slugs?.huntSlug && slugs?.questSlug && isHuntAdmin"
           text-color="danger"
           hover-color="danger"
           active-color="onDanger"
diff --git a/app/pages/hunt/[huntSlug]/[questSlug]/admin.vue b/app/pages/hunt/[huntSlug]/[questSlug]/admin.vue
index 3bab881..6527664 100644
--- a/app/pages/hunt/[huntSlug]/[questSlug]/admin.vue
+++ b/app/pages/hunt/[huntSlug]/[questSlug]/admin.vue
@@ -1,10 +1,11 @@
 <script setup lang="ts">
-import { sluggy } from '#imports';
+import { parseError, sluggy } from '#imports';
 import { useI18nKey } from '~/composables/useI18nKey';
+import { useHuntStore } from '~/stores/hunt';
 import { useTitleStore } from '~/stores/title';
 
 definePageMeta({
-  middleware: ['admin'],
+  middleware: ['auth'],
   keepalive: false
 });
 
@@ -18,8 +19,11 @@ const router = useRouter();
 const { huntSlug } = app.$slugData;
 const { name, id } = app.$slugData.questSlug!;
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
 
-const { data, refresh } = await useFetch(`/api/admin/quest/${id}`);
+const { data, refresh, error } = await useFetch(`/api/admin/quest/${id}`);
+
+huntStore.setMembership(huntSlug!.id, !error.value);
 
 useHead({
   title: t('layouts.title', {
@@ -38,52 +42,64 @@ titleStore.title = data.value ? tKey(data.value, 'title').value : undefined;
 
 <template>
   <div>
-    <h1 class="my-4 text-3xl">Admin—{{ data?.title_de }}</h1>
-    <VaButtonGroup>
+    <div v-if="error">
+      <VaAlert color="danger" class="my-4">
+        {{ t(parseError(error)) }}
+      </VaAlert>
       <VaButton
         icon="arrow_back"
-        :to="
-          localePath(
-            `/hunt/${data ? tSluggy(data.hunt).value : sluggy(huntSlug!)}`
-          )
-        "
+        :to="localePath(`/hunt/${sluggy(huntSlug!)}`)"
         >{{ t('page.common.back_to_hunt') }}</VaButton
       >
-      <VaButton icon="replay" color="success" @click="refresh"
-        >Refresh</VaButton
-      >
-    </VaButtonGroup>
-    <div v-if="data" class="my-2 flex flex-col gap-2 p-4">
-      <p>{{ tKey(data, 'description') }}</p>
-      <p v-if="hasKey(data, 'question')">{{ tKey(data, 'question') }}</p>
     </div>
-    <div class="mb-4 grid grid-cols-2 gap-2 p-2 md:flex md:flex-row">
-      <VaChip outline>In progress</VaChip>
-      <VaChip color="primary">Reviewable</VaChip>
-      <VaChip color="danger">Review missing</VaChip>
-      <VaChip color="success">Reviewed</VaChip>
-    </div>
-    <div v-if="data">
-      <p class="text-xl">{{ data.points }} Points</p>
-      <p v-if="data.extraPoints" class="text-xl">
-        {{ data.extraPoints }} Extra points
-      </p>
-      <p v-if="hasKey(data, 'extraText')">
-        Extra: {{ tKey(data, 'extraText') }}
-      </p>
-    </div>
-    <div v-if="data && data.answers.length > 0">
-      <VaAccordion multiple stateful>
-        <AdminAnswer
-          v-for="answer in data.answers"
-          :key="answer.id"
-          :answer="answer"
-          :quest="data"
-          @update="refresh"
-        />
-      </VaAccordion>
-    </div>
-    <p v-else class="mt-4 text-lg">No answers yet</p>
+    <template v-else>
+      <h1 class="my-4 text-3xl">Admin—{{ data?.title_de }}</h1>
+      <VaButtonGroup>
+        <VaButton
+          icon="arrow_back"
+          :to="
+            localePath(
+              `/hunt/${data ? tSluggy(data.hunt).value : sluggy(huntSlug!)}`
+            )
+          "
+          >{{ t('page.common.back_to_hunt') }}</VaButton
+        >
+        <VaButton icon="replay" color="success" @click="refresh"
+          >Refresh</VaButton
+        >
+      </VaButtonGroup>
+      <div v-if="data" class="my-2 flex flex-col gap-2 p-4">
+        <p>{{ tKey(data, 'description') }}</p>
+        <p v-if="hasKey(data, 'question')">{{ tKey(data, 'question') }}</p>
+      </div>
+      <div class="mb-4 grid grid-cols-2 gap-2 p-2 md:flex md:flex-row">
+        <VaChip outline>In progress</VaChip>
+        <VaChip color="primary">Reviewable</VaChip>
+        <VaChip color="danger">Review missing</VaChip>
+        <VaChip color="success">Reviewed</VaChip>
+      </div>
+      <div v-if="data">
+        <p class="text-xl">{{ data.points }} Points</p>
+        <p v-if="data.extraPoints" class="text-xl">
+          {{ data.extraPoints }} Extra points
+        </p>
+        <p v-if="hasKey(data, 'extraText')">
+          Extra: {{ tKey(data, 'extraText') }}
+        </p>
+      </div>
+      <div v-if="data && data.answers.length > 0">
+        <VaAccordion multiple stateful>
+          <AdminAnswer
+            v-for="answer in data.answers"
+            :key="answer.id"
+            :answer="answer"
+            :quest="data"
+            @update="refresh"
+          />
+        </VaAccordion>
+      </div>
+      <p v-else class="mt-4 text-lg">No answers yet</p>
+    </template>
   </div>
 </template>
 
diff --git a/app/pages/hunt/[huntSlug]/[questSlug]/index.vue b/app/pages/hunt/[huntSlug]/[questSlug]/index.vue
index d958c28..1f5ce56 100644
--- a/app/pages/hunt/[huntSlug]/[questSlug]/index.vue
+++ b/app/pages/hunt/[huntSlug]/[questSlug]/index.vue
@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { parseError, sluggy } from '#imports';
+import { parseError, sluggy, useHuntStore } from '#imports';
 import { compressImage, createImageURL } from '#shared/utils/image';
 import ClickableImage from '~/components/ClickableImage.vue';
 import MultilineString from '~/components/MultilineString.vue';
@@ -22,6 +22,13 @@ const localePath = useLocalePath();
 const { tKey, hasKey, tSluggy } = useI18nKey();
 
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
+const isHuntAdmin = computed(
+  () =>
+    huntSlug !== undefined &&
+    huntStore.huntId === huntSlug.id &&
+    huntStore.isMember
+);
 
 const { data, pending, refresh, error } = await useFetch(
   `/api/quest/${questSlug?.id}`
@@ -195,11 +202,11 @@ async function submit() {
         >{{ t('layouts.refresh') }}</VaButton
       >
       <VaButton
-        v-if="user && user.role === 'ADMIN'"
+        v-if="user && isHuntAdmin"
         color="danger"
         :to="
           localePath(
-            `/hunt/${data?.hunt ? tSluggy(data.hunt).value : sluggy(huntSlug!)}/${data ? tSluggy(data).value : sluggy(questSlug!)}}/admin`
+            `/hunt/${data?.hunt ? tSluggy(data.hunt).value : sluggy(huntSlug!)}/${data ? tSluggy(data).value : sluggy(questSlug!)}/admin`
           )
         "
         >{{ t('page.common.admin') }}</VaButton
@@ -268,7 +275,7 @@ async function submit() {
           </VaCardContent>
         </VaCard>
         <VaCard
-          v-if="user && user.role !== 'ADMIN' && data.teamId"
+          v-if="user && !isHuntAdmin && data.teamId"
           stripe
           :stripe-color="data.answer?.final ? 'success' : 'primary'"
         >
diff --git a/app/pages/hunt/[huntSlug]/admin.vue b/app/pages/hunt/[huntSlug]/admin.vue
index 0354964..c7829c8 100644
--- a/app/pages/hunt/[huntSlug]/admin.vue
+++ b/app/pages/hunt/[huntSlug]/admin.vue
@@ -1,12 +1,14 @@
 <script setup lang="ts">
+import { parseError, sluggy } from '#imports';
 import { createImageURL } from '#shared/utils/image';
 import superjson, { type SuperJSONResult } from 'superjson';
 import { useI18nKey } from '~/composables/useI18nKey';
+import { useHuntStore } from '~/stores/hunt';
 import { useTitleStore } from '~/stores/title';
 import { fullDate } from '~~/server/utils/date';
 
 definePageMeta({
-  middleware: ['admin'],
+  middleware: ['auth'],
   keepalive: false
 });
 
@@ -22,14 +24,20 @@ const { init } = useToast();
 
 const { name, id } = app.$slugData.huntSlug!;
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
 
-const { data, pending, refresh } = await useFetch(`/api/admin/hunt/${id}`, {
-  transform: (value) => {
-    return superjson.deserialize(
-      value as unknown as SuperJSONResult
-    ) as unknown as typeof value;
+const { data, pending, refresh, error } = await useFetch(
+  `/api/admin/hunt/${id}`,
+  {
+    transform: (value) => {
+      return superjson.deserialize(
+        value as unknown as SuperJSONResult
+      ) as unknown as typeof value;
+    }
   }
-});
+);
+
+huntStore.setMembership(id, !error.value);
 
 const formData = useCloned(data, {
   clone: (source) => superjson.deserialize(superjson.serialize(source))
@@ -204,199 +212,212 @@ async function deleteImage() {
 
 <template>
   <div>
-    <h1>admin</h1>
-    <VaForm v-if="formData.cloned.value && data" class="flex flex-col gap-4">
-      <VaInput
-        v-model="formData.cloned.value.name_de"
-        label="Name DE"
-        clearable
-        :clear-value="data.name_de"
-        clearable-icon="replay"
-      />
-      <VaInput
-        v-model="formData.cloned.value.name_en"
-        label="Name EN"
-        clearable
-        :clear-value="data.name_en"
-        clearable-icon="replay"
-      />
-      <VaTextarea
-        v-model="formData.cloned.value.description_de"
-        label="Description DE"
-        clearable
-        :clear-value="data.description_de"
-        clearable-icon="replay"
-      />
-      <VaTextarea
-        v-model="formData.cloned.value.description_en"
-        label="Description EN"
-        clearable
-        :clear-value="data.description_en"
-        clearable-icon="replay"
-      />
-      <VaCheckbox v-model="formData.cloned.value.virtual" label="Virtual" />
-      <VaCheckbox
-        v-model="formData.cloned.value.allowJoin"
-        label="Allow Join"
-      />
-      <VaCheckbox
-        v-model="formData.cloned.value.revealQuests"
-        label="Reveal Quests"
-      />
-      <VaCheckbox
-        v-model="formData.cloned.value.revealAnswers"
-        label="Reveal Answers"
-      />
-      <div class="flex flex-row gap-2">
-        <VaCheckbox
-          label="Start?"
-          :model-value="!!formData.cloned.value.start"
-          @update:model-value="
-            (newVal: boolean) =>
-              (formData.cloned.value!.start = newVal ? new Date() : null)
-          "
-        />
-        <VaDateInput
-          v-if="formData.cloned.value.start"
-          v-model="formData.cloned.value.start"
-          label="Start"
-          manual-input
-        />
-        <VaTimeInput
-          v-if="formData.cloned.value.start"
-          v-model="formData.cloned.value.start"
-          label="Start"
-          view="seconds"
-          manual-input
-        />
-      </div>
-      <div class="flex flex-row gap-2">
-        <VaCheckbox
-          label="End?"
-          :model-value="!!formData.cloned.value.end"
-          @update:model-value="
-            (newVal: boolean) =>
-              (formData.cloned.value!.end = newVal ? new Date() : null)
-          "
-        />
-        <VaDateInput
-          v-if="formData.cloned.value.end"
-          v-model="formData.cloned.value.end"
-          label="End"
-          manual-input
-        />
-        <VaTimeInput
-          v-if="formData.cloned.value.end"
-          v-model="formData.cloned.value.end"
-          label="End"
-          view="seconds"
-          manual-input
-        />
-      </div>
-      <p>
-        Last update:
-        {{ d(data.updatedAt, fullDate) }}
-      </p>
-      <VaButtonGroup :loading="pending" :disabled="pending">
-        <VaButton
-          icon="replay"
-          :disabled="!formData.isModified.value"
-          @click.prevent="formData.sync()"
-          >Reset all values</VaButton
-        >
-        <VaButton
-          :disabled="formData.isModified.value"
-          @click.prevent="refresh()"
-          >Refresh</VaButton
-        >
-        <VaButton :disabled="!formData.isModified.value" @click.prevent="submit"
-          >Save</VaButton
-        >
-      </VaButtonGroup>
-    </VaForm>
-    <VaDivider />
-    <h2 class="text-2xl">Image</h2>
-    <div>
-      <VaImage
-        v-if="newImage"
-        :src="createImageURL(newImage)"
-        class="max-h-60 w-full"
-        fit="contain"
-        lazy
-      />
-      <VaImage
-        v-else-if="data?.picture"
-        :src="data?.picture?.url"
-        class="max-h-60 w-full"
-        fit="contain"
-        lazy
-      >
-        <template #loader> <VaProgressCircle indeterminate /> </template
-      ></VaImage>
-      <VaFileUpload
-        v-model="newImage"
-        :disabled="uploading || pending"
-        type="single"
-        file-types="jpg,png,jpeg"
-      />
-      <VaAlert
-        v-if="imageError.length > 0"
-        color="danger"
-        class="w-full text-center"
-        >{{ t(imageError) }}</VaAlert
-      >
-      <VaButtonGroup :disabled="uploading || pending">
-        <VaButton color="success" :disabled="!newImage" @click="updateImage">
-          Upload new image
-        </VaButton>
-        <VaButton
-          color="danger"
-          icon="delete"
-          :disabled="!data?.picture"
-          @click="deleteImage"
-          >Delete image</VaButton
-        >
-      </VaButtonGroup>
-    </div>
-
-    <VaDivider />
-    <h2 class="text-2xl">Hunt admin members:</h2>
-    <div
-      v-if="data"
-      class="mt-8 grid grid-cols-1 gap-2 md:grid-cols-3 lg:grid-cols-5"
-    >
+    <div v-if="error">
+      <VaAlert color="danger" class="my-4">
+        {{ t(parseError(error)) }}
+      </VaAlert>
       <VaButton
-        v-for="member in data.members"
-        :key="member.member.id"
-        color="danger"
-        :disabled="loading"
-        :loading="loading"
-        @click="kick(member)"
-        >Kick {{ member.member.name }} ({{ member.member.email }})</VaButton
-      >
-      <VaChip v-if="data.members.length <= 0">No members yet</VaChip>
-    </div>
-    <div v-if="data" class="mt-8 flex flex-col gap-2 md:flex-row">
-      <VaSelect
-        v-model="newUser"
-        v-model:search="search"
-        label="New Admin Member"
-        placeholder="Start typing their email..."
-        autocomplete
-        highlight-matched-text
-        :options="users"
-        :loading="searchPending"
-        track-by="id"
-        text-by="email"
-      /><VaButton
-        icon="add"
-        color="danger"
-        :disabled="!newUser || loading"
-        :loading="loading"
-        @click="addUser"
-        >Add admin</VaButton
+        icon="arrow_back"
+        :to="localePath(`/hunt/${sluggy(app.$slugData.huntSlug!)}`)"
+        >{{ t('page.common.back_to_hunt') }}</VaButton
       >
     </div>
+    <template v-else>
+      <VaForm v-if="formData.cloned.value && data" class="flex flex-col gap-4">
+        <VaInput
+          v-model="formData.cloned.value.name_de"
+          label="Name DE"
+          clearable
+          :clear-value="data.name_de"
+          clearable-icon="replay"
+        />
+        <VaInput
+          v-model="formData.cloned.value.name_en"
+          label="Name EN"
+          clearable
+          :clear-value="data.name_en"
+          clearable-icon="replay"
+        />
+        <VaTextarea
+          v-model="formData.cloned.value.description_de"
+          label="Description DE"
+          clearable
+          :clear-value="data.description_de"
+          clearable-icon="replay"
+        />
+        <VaTextarea
+          v-model="formData.cloned.value.description_en"
+          label="Description EN"
+          clearable
+          :clear-value="data.description_en"
+          clearable-icon="replay"
+        />
+        <VaCheckbox v-model="formData.cloned.value.virtual" label="Virtual" />
+        <VaCheckbox
+          v-model="formData.cloned.value.allowJoin"
+          label="Allow Join"
+        />
+        <VaCheckbox
+          v-model="formData.cloned.value.revealQuests"
+          label="Reveal Quests"
+        />
+        <VaCheckbox
+          v-model="formData.cloned.value.revealAnswers"
+          label="Reveal Answers"
+        />
+        <div class="flex flex-row gap-2">
+          <VaCheckbox
+            label="Start?"
+            :model-value="!!formData.cloned.value.start"
+            @update:model-value="
+              (newVal: boolean) =>
+                (formData.cloned.value!.start = newVal ? new Date() : null)
+            "
+          />
+          <VaDateInput
+            v-if="formData.cloned.value.start"
+            v-model="formData.cloned.value.start"
+            label="Start"
+            manual-input
+          />
+          <VaTimeInput
+            v-if="formData.cloned.value.start"
+            v-model="formData.cloned.value.start"
+            label="Start"
+            view="seconds"
+            manual-input
+          />
+        </div>
+        <div class="flex flex-row gap-2">
+          <VaCheckbox
+            label="End?"
+            :model-value="!!formData.cloned.value.end"
+            @update:model-value="
+              (newVal: boolean) =>
+                (formData.cloned.value!.end = newVal ? new Date() : null)
+            "
+          />
+          <VaDateInput
+            v-if="formData.cloned.value.end"
+            v-model="formData.cloned.value.end"
+            label="End"
+            manual-input
+          />
+          <VaTimeInput
+            v-if="formData.cloned.value.end"
+            v-model="formData.cloned.value.end"
+            label="End"
+            view="seconds"
+            manual-input
+          />
+        </div>
+        <p>
+          Last update:
+          {{ d(data.updatedAt, fullDate) }}
+        </p>
+        <VaButtonGroup :loading="pending" :disabled="pending">
+          <VaButton
+            icon="replay"
+            :disabled="!formData.isModified.value"
+            @click.prevent="formData.sync()"
+            >Reset all values</VaButton
+          >
+          <VaButton
+            :disabled="formData.isModified.value"
+            @click.prevent="refresh()"
+            >Refresh</VaButton
+          >
+          <VaButton
+            :disabled="!formData.isModified.value"
+            @click.prevent="submit"
+            >Save</VaButton
+          >
+        </VaButtonGroup>
+      </VaForm>
+      <VaDivider />
+      <h2 class="text-2xl">Image</h2>
+      <div>
+        <VaImage
+          v-if="newImage"
+          :src="createImageURL(newImage)"
+          class="max-h-60 w-full"
+          fit="contain"
+          lazy
+        />
+        <VaImage
+          v-else-if="data?.picture"
+          :src="data?.picture?.url"
+          class="max-h-60 w-full"
+          fit="contain"
+          lazy
+        >
+          <template #loader> <VaProgressCircle indeterminate /> </template
+        ></VaImage>
+        <VaFileUpload
+          v-model="newImage"
+          :disabled="uploading || pending"
+          type="single"
+          file-types="jpg,png,jpeg"
+        />
+        <VaAlert
+          v-if="imageError.length > 0"
+          color="danger"
+          class="w-full text-center"
+          >{{ t(imageError) }}</VaAlert
+        >
+        <VaButtonGroup :disabled="uploading || pending">
+          <VaButton color="success" :disabled="!newImage" @click="updateImage">
+            Upload new image
+          </VaButton>
+          <VaButton
+            color="danger"
+            icon="delete"
+            :disabled="!data?.picture"
+            @click="deleteImage"
+            >Delete image</VaButton
+          >
+        </VaButtonGroup>
+      </div>
+
+      <VaDivider />
+      <h2 class="text-2xl">Hunt admin members:</h2>
+      <div
+        v-if="data"
+        class="mt-8 grid grid-cols-1 gap-2 md:grid-cols-3 lg:grid-cols-5"
+      >
+        <VaButton
+          v-for="member in data.members"
+          :key="member.member.id"
+          color="danger"
+          :disabled="loading"
+          :loading="loading"
+          @click="kick(member)"
+          >Kick {{ member.member.name }} ({{ member.member.email }})</VaButton
+        >
+        <VaChip v-if="data.members.length <= 0">No members yet</VaChip>
+      </div>
+      <div v-if="data" class="mt-8 flex flex-col gap-2 md:flex-row">
+        <VaSelect
+          v-model="newUser"
+          v-model:search="search"
+          label="New Admin Member"
+          placeholder="Start typing their email..."
+          autocomplete
+          highlight-matched-text
+          :options="users"
+          :loading="searchPending"
+          track-by="id"
+          text-by="email"
+        /><VaButton
+          icon="add"
+          color="danger"
+          :disabled="!newUser || loading"
+          :loading="loading"
+          @click="addUser"
+          >Add admin</VaButton
+        >
+      </div>
+    </template>
   </div>
 </template>
 
diff --git a/app/pages/hunt/[huntSlug]/index.vue b/app/pages/hunt/[huntSlug]/index.vue
index ff97d00..edb8a9e 100644
--- a/app/pages/hunt/[huntSlug]/index.vue
+++ b/app/pages/hunt/[huntSlug]/index.vue
@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import { parseError } from '#imports';
 import TeamAddModal from '~/components/TeamAddModal.vue';
+import { useHuntStore } from '~/stores/hunt';
 import { useSettingsStore } from '~/stores/settings';
 import { useTitleStore } from '~/stores/title';
 import { fullDate } from '~~/server/utils/date';
@@ -15,9 +16,12 @@ const { init } = useToast();
 const { name, id } = app.$slugData.huntSlug!;
 
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
 
 const { data, pending, refresh, error } = await useFetch(`/api/hunt/${id}`);
 
+huntStore.setMembership(id, data.value?.isMember ?? false);
+
 const settings = useSettingsStore();
 
 useHead({
diff --git a/app/pages/hunt/[huntSlug]/teams.vue b/app/pages/hunt/[huntSlug]/teams.vue
index 9082eca..291b235 100644
--- a/app/pages/hunt/[huntSlug]/teams.vue
+++ b/app/pages/hunt/[huntSlug]/teams.vue
@@ -1,9 +1,11 @@
 <script setup lang="ts">
+import { parseError, sluggy } from '#imports';
 import Team from '~/components/admin/Team.vue';
+import { useHuntStore } from '~/stores/hunt';
 import { useTitleStore } from '~/stores/title';
 
 definePageMeta({
-  middleware: ['admin']
+  middleware: ['auth']
 });
 
 const app = useNuxtApp();
@@ -15,8 +17,11 @@ const router = useRouter();
 
 const { name, id } = app.$slugData.huntSlug!;
 const titleStore = useTitleStore();
+const huntStore = useHuntStore();
 
-const { data, refresh } = await useFetch(`/api/admin/hunt/${id}/teams`);
+const { data, refresh, error } = await useFetch(`/api/admin/hunt/${id}/teams`);
+
+huntStore.setMembership(id, !error.value);
 
 useHead({
   title: t('layouts.title', {
@@ -38,17 +43,31 @@ export type Team = Data['teams'][number];
 
 <template>
   <div>
-    <h1>teams</h1>
-    <VaButton color="success" icon="replay" @click="refresh">Refresh</VaButton>
-    <VaAccordion v-if="data" stateful>
-      <Team
-        v-for="team in data.teams"
-        :key="team.id"
-        :team="team"
-        :hunt-id="id"
-        @refresh="refresh"
-      />
-    </VaAccordion>
+    <div v-if="error">
+      <VaAlert color="danger" class="my-4">
+        {{ t(parseError(error)) }}
+      </VaAlert>
+      <VaButton
+        icon="arrow_back"
+        :to="localePath(`/hunt/${sluggy(app.$slugData.huntSlug!)}`)"
+        >{{ t('page.common.back_to_hunt') }}</VaButton
+      >
+    </div>
+    <template v-else>
+      <h1>teams</h1>
+      <VaButton color="success" icon="replay" @click="refresh"
+        >Refresh</VaButton
+      >
+      <VaAccordion v-if="data" stateful>
+        <Team
+          v-for="team in data.teams"
+          :key="team.id"
+          :team="team"
+          :hunt-id="id"
+          @refresh="refresh"
+        />
+      </VaAccordion>
+    </template>
   </div>
 </template>
 
diff --git a/app/stores/hunt.ts b/app/stores/hunt.ts
new file mode 100644
index 0000000..328f160
--- /dev/null
+++ b/app/stores/hunt.ts
@@ -0,0 +1,14 @@
+export const useHuntStore = defineStore('hunt', () => {
+  const huntId = ref<number>();
+  const isMember = ref(false);
+
+  function setMembership(id: number, member: boolean) {
+    huntId.value = id;
+    isMember.value = member;
+  }
+
+  return { huntId, isMember, setMembership };
+});
+if (import.meta.hot) {
+  import.meta.hot.accept(acceptHMRUpdate(useHuntStore, import.meta.hot));
+}