31 lines
739 B
Go
31 lines
739 B
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"net/http"
|
||
|
|
|
||
|
|
"github.com/gin-gonic/gin"
|
||
|
|
|
||
|
|
"dating-app/internal/models"
|
||
|
|
"dating-app/internal/utils"
|
||
|
|
)
|
||
|
|
|
||
|
|
// AdminRequired باید بعد از AuthRequired استفاده بشه. فقط کاربرانی که IsAdmin=true
|
||
|
|
// دارن اجازهی عبور دارن.
|
||
|
|
func AdminRequired() gin.HandlerFunc {
|
||
|
|
return func(c *gin.Context) {
|
||
|
|
userVal, exists := c.Get(ContextUserKey)
|
||
|
|
if !exists {
|
||
|
|
utils.Fail(c, http.StatusUnauthorized, "احراز هویت لازم است", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
user, ok := userVal.(*models.User)
|
||
|
|
if !ok || !user.IsAdmin {
|
||
|
|
utils.Fail(c, http.StatusForbidden, "دسترسی فقط برای ادمین است", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
c.Next()
|
||
|
|
}
|
||
|
|
}
|