13 lines
281 B
JavaScript
13 lines
281 B
JavaScript
const roleMiddleware = (...allowedRoles) => {
|
|
return (req, res, next) => {
|
|
if (!req.user || !allowedRoles.includes(req.user.role)) {
|
|
return res.status(403).json({
|
|
message: "Accès refusé.",
|
|
});
|
|
}
|
|
|
|
next();
|
|
};
|
|
};
|
|
|
|
module.exports = roleMiddleware; |