import {IMiddleware} from "./IMiddleware"; import {NextFunction, Request, Response} from "express"; export class IsAdmin implements IMiddleware { handle(_: Request, res: Response, next: NextFunction): Response | void { if (!res.locals.userId) { return res.status(403).send({ error: "NOT_AUTHENTICATED" }); } else if (res.locals.userAccessLevel !== "Admin") { return res.status(403).send({ error: "NOT_ADMIN" }); } return next(); } }