api/middleware/AdminAccessControl.ts

/*
 * This file is part of SudoBot.
 *
 * Copyright (C) 2021-2023 OSN Developers.
 *
 * SudoBot is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * SudoBot is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with SudoBot. If not, see <https://www.gnu.org/licenses/>.
 */

import { NextFunction, Response } from "express";
import Request from "../Request";

// FIXME
const ROOT_USER_ID = 1;

export default async function AdminAccessControl(request: Request, response: Response, next: NextFunction) {
    if (!request.user) {
        response.status(401).send({
            error: "Cannot authorize this request."
        });

        return;
    }

    if (request.userId !== ROOT_USER_ID) {
        response.status(403).send({
            error: "Access denied."
        });

        return;
    }

    next();
}
1	rakinar2	577	/*
2			* This file is part of SudoBot.
3			*
4			* Copyright (C) 2021-2023 OSN Developers.
5			*
6			* SudoBot is free software; you can redistribute it and/or modify it
7			* under the terms of the GNU Affero General Public License as published by
8			* the Free Software Foundation, either version 3 of the License, or
9			* (at your option) any later version.
10			*
11			* SudoBot is distributed in the hope that it will be useful, but
12			* WITHOUT ANY WARRANTY; without even the implied warranty of
13			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14			* GNU Affero General Public License for more details.
15			*
16			* You should have received a copy of the GNU Affero General Public License
17			* along with SudoBot. If not, see <https://www.gnu.org/licenses/>.
18			*/
19
20			import { NextFunction, Response } from "express";
21			import Request from "../Request";
22
23			// FIXME
24			const ROOT_USER_ID = 1;
25
26			export default async function AdminAccessControl(request: Request, response: Response, next: NextFunction) {
27			if (!request.user) {
28			response.status(401).send({
29			error: "Cannot authorize this request."
30			});
31
32			return;
33			}
34
35			if (request.userId !== ROOT_USER_ID) {
36			response.status(403).send({
37			error: "Access denied."
38			});
39
40			return;
41			}
42
43			next();
44			}