roles

auth/authmiddleware/must.go

@@ -0,0 +1,20 @@
+package authmiddleware
+
+import (
+	"net/http"
+
+	"git.sapphic.engineer/roleypoly/v4/types"
+	"github.com/gofiber/fiber/v3"
+)
+
+func MustHavePermission(perm Permission) func(fiber.Ctx) error {
+	return func(c fiber.Ctx) error {
+		sess := SessionFrom(c)
+
+		if sess.Permissions >= perm {
+			return c.Next()
+		}
+
+		return types.NewAPIError(http.StatusForbidden, "no sorry").Send(c)
+	}
+}