Files
ForgeBucket/internal/api/middleware/rbac.go
T
2026-05-06 23:13:06 +02:00

17 lines
339 B
Go

package middleware
import (
"net/http"
)
func RequireAdmin(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
isAdmin, _ := r.Context().Value(ContextKeyIsAdmin).(bool)
if !isAdmin {
http.Error(w, "forbidden", http.StatusForbidden)
return
}
next.ServeHTTP(w, r)
})
}