api/middleware/AdminAccessControl.ts

/*
 * This file is part of SudoBot.
 *
 * Copyright (C) 2021-2023 OSN Developers.
 *
 * SudoBot is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * SudoBot is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with SudoBot. If not, see <https://www.gnu.org/licenses/>.
 */

import { NextFunction, Response } from "express";
import Request from "../Request";

// FIXME
const ROOT_USER_ID = 1;

export default async function AdminAccessControl(request: Request, response: Response, next: NextFunction) {
    if (!request.user) {
        response.status(401).send({
            error: "Cannot authorize this request."
        });

        return;
    }

    if (request.userId !== ROOT_USER_ID) {
        response.status(403).send({
            error: "Access denied."
        });

        return;
    }

    next();
}
1	/*
2	* This file is part of SudoBot.
3	*
4	* Copyright (C) 2021-2023 OSN Developers.
5	*
6	* SudoBot is free software; you can redistribute it and/or modify it
7	* under the terms of the GNU Affero General Public License as published by
8	* the Free Software Foundation, either version 3 of the License, or
9	* (at your option) any later version.
10	*
11	* SudoBot is distributed in the hope that it will be useful, but
12	* WITHOUT ANY WARRANTY; without even the implied warranty of
13	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14	* GNU Affero General Public License for more details.
15	*
16	* You should have received a copy of the GNU Affero General Public License
17	* along with SudoBot. If not, see <https://www.gnu.org/licenses/>.
18	*/
19
20	import { NextFunction, Response } from "express";
21	import Request from "../Request";
22
23	// FIXME
24	const ROOT_USER_ID = 1;
25
26	export default async function AdminAccessControl(request: Request, response: Response, next: NextFunction) {
27	if (!request.user) {
28	response.status(401).send({
29	error: "Cannot authorize this request."
30	});
31
32	return;
33	}
34
35	if (request.userId !== ROOT_USER_ID) {
36	response.status(403).send({
37	error: "Access denied."
38	});
39
40	return;
41	}
42
43	next();
44	}