Init

internal/middlewares/roleMiddleware.go

@@ -0,0 +1,62 @@
+package middlewares
+
+import (
+	"history-api/pkg/constant"
+	"history-api/pkg/dtos/response"
+	"slices"
+
+	"github.com/gofiber/fiber/v3"
+)
+
+func getRoles(c fiber.Ctx) ([]constant.Role, error) {
+	claimsVal := c.Locals("user_claims")
+	if claimsVal == nil {
+		return nil, fiber.ErrUnauthorized
+	}
+
+	claims, ok := claimsVal.(*response.JWTClaims)
+	if !ok {
+		return nil, fiber.ErrUnauthorized
+	}
+
+	return claims.Roles, nil
+}
+
+func RequireAnyRole(required ...constant.Role) fiber.Handler {
+	return func(c fiber.Ctx) error {
+		userRoles, err := getRoles(c)
+		if err != nil {
+			return err
+		}
+
+		if len(userRoles) == 0 {
+			return fiber.ErrForbidden
+		}
+
+		for _, ur := range userRoles {
+			if slices.Contains(required, ur) {
+				return c.Next()
+			}
+		}
+
+		return fiber.ErrForbidden
+	}
+}
+
+func RequireAllRoles(required ...constant.Role) fiber.Handler {
+	return func(c fiber.Ctx) error {
+		userRoles, err := getRoles(c)
+		if err != nil {
+			return err
+		}
+
+		for _, rr := range required {
+			found := slices.Contains(userRoles, rr)
+			if !found {
+				return fiber.ErrForbidden
+			}
+		}
+
+		return c.Next()
+	}
+}