Sanity User Auth Granted

import sanityClient from "@sanity/client";

const client = sanityClient({
  projectId: process.env.GATSBY_SANITY_PROJECT_ID,
  dataset: process.env.GATSBY_SANITY_PROJECT_DATASET,
  apiVersion: "2021-08-29",
  useCdn: false,
  withCredentials: true,
  token: process.env.GATSBY_SANITY_READ_TOKEN,
});

export default async function handler(req, res) {
  res.setHeader("Access-Control-Allow-Origin", "*");

  const body = JSON.parse(req.body);
  const { password } = body;

  const types = ["pageModulaire"];
  const query = `*[_type in $types
    && !(_id in path("drafts.**"))
    && password == $password
    ]
    { title,  _type } | order(_createdAt asc)`;
  // console.log(query);

  const params = { password: password, types: types };

  try {
    const data = await client.fetch(query, params);
    console.log(data);
    const granted = data.length > 0;
    res.status(200).json({ granted });
  } catch (error) {
    res.status(500).json({ message: error });
  }
}