#5 [feat] create check admin middlewares

Pironeer-APP · May 28, 2024 · 57e78d8 · 57e78d8
1 parent 2e7e90d
commit 57e78d8
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/api/middlewares/admin.js b/api/middlewares/admin.js
@@ -0,0 +1,11 @@
+const adminMiddleware = (req, res, next) => {
+  if (!req.user) {
+    return res.status(403).json({ message: "Access denied, empty user" });
+  }
+  if (!req.user.isAdmin) {
+    return res.status(403).json({ message: "Access denied, admin only" });
+  }
+  next();
+};
+
+module.exports = adminMiddleware;