feat: implement user routes with authentication and role-based access control
All checks were successful
Build and Release / release (push) Successful in 1m36s

This commit is contained in:
2026-05-17 23:39:53 +07:00
parent 374c3b4f47
commit fc7320cda1

View File

@@ -58,14 +58,14 @@ func UserRoutes(app *fiber.App, controller *controllers.UserController, userRepo
route.Delete( route.Delete(
"/:id", "/:id",
middlewares.JwtAccess(userRepo), middlewares.JwtAccess(userRepo),
middlewares.RequireAnyRole(constants.RoleTypeAdmin, constants.RoleTypeMod), middlewares.RequireAnyRole(constants.RoleTypeAdmin),
controller.DeleteUser, controller.DeleteUser,
) )
route.Put( route.Put(
"/:id", "/:id",
middlewares.JwtAccess(userRepo), middlewares.JwtAccess(userRepo),
middlewares.RequireAnyRole(constants.RoleTypeAdmin, constants.RoleTypeMod), middlewares.RequireAnyRole(constants.RoleTypeAdmin),
controller.AdminUpdateProfile, controller.AdminUpdateProfile,
) )
@@ -93,14 +93,14 @@ func UserRoutes(app *fiber.App, controller *controllers.UserController, userRepo
route.Patch( route.Patch(
"/:id/restore", "/:id/restore",
middlewares.JwtAccess(userRepo), middlewares.JwtAccess(userRepo),
middlewares.RequireAnyRole(constants.RoleTypeAdmin, constants.RoleTypeMod), middlewares.RequireAnyRole(constants.RoleTypeAdmin),
controller.RestoreUser, controller.RestoreUser,
) )
route.Patch( route.Patch(
"/:id/password", "/:id/password",
middlewares.JwtAccess(userRepo), middlewares.JwtAccess(userRepo),
middlewares.RequireAnyRole(constants.RoleTypeAdmin, constants.RoleTypeMod), middlewares.RequireAnyRole(constants.RoleTypeAdmin),
controller.AdminResetPassword, controller.AdminResetPassword,
) )
@@ -121,7 +121,7 @@ func UserRoutes(app *fiber.App, controller *controllers.UserController, userRepo
route.Post( route.Post(
"/", "/",
middlewares.JwtAccess(userRepo), middlewares.JwtAccess(userRepo),
middlewares.RequireAnyRole(constants.RoleTypeAdmin, constants.RoleTypeMod), middlewares.RequireAnyRole(constants.RoleTypeAdmin),
controller.CreateUser, controller.CreateUser,
) )