/
githubmirror
/
Open-Assistant
Обзор
Документация
Войти
/
githubmirror
/
Open-Assistant
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
website/src/lib/auth.ts
49 строк
2 KB
notmd
add moderator role (#1419)
10 фев 2023, 12:18
Не верифицирован
10 фев 2023, 12:18
7a0bfa2
Код
Авторство
О чём код?
import type { NextApiRequest, NextApiResponse } from "next"; import { getToken, JWT } from "next-auth/jwt"; import { Role } from "src/components/RoleSelect"; /** * Wraps any API Route handler and verifies that the user does not have the * specified role. Returns a 403 if they do, otherwise runs the handler. */ const withoutRole = (role: Role, handler: (arg0: NextApiRequest, arg1: NextApiResponse, arg2: JWT) => void) => { return async (req: NextApiRequest, res: NextApiResponse) => { const token = await getToken({ req }); if (!token || token.role === role) { res.status(403).end(); return; } return handler(req, res, token); }; }; /** * Wraps any API Route handler and verifies that the user has the appropriate * role before running the handler. Returns a 403 otherwise. */ const withRole = (role: Role, handler: (arg0: NextApiRequest, arg1: NextApiResponse, token: JWT) => void) => { return async (req: NextApiRequest, res: NextApiResponse) => { const token = await getToken({ req }); if (!token || token.role !== role) { res.status(403).end(); return; } return handler(req, res, token); }; }; export const withAnyRole = ( roles: Role[], handler: (arg0: NextApiRequest, arg1: NextApiResponse, token: JWT) => void ) => { return async (req: NextApiRequest, res: NextApiResponse) => { const token = await getToken({ req }); if (!token || roles.every((role) => token.role !== role)) { res.status(403).end(); return; } return handler(req, res, token); }; }; export { withoutRole, withRole };