tethys.backend/app/Middleware/Role.ts

import type { HttpContextContract } from '@ioc:Adonis/Core/HttpContext';
import Database from '@ioc:Adonis/Lucid/Database';
import Config from '@ioc:Adonis/Core/Config';
import User from 'app/Models/User';
import { Exception } from '@adonisjs/core/build/standalone';

const roleTable = Config.get('rolePermission.role_table', 'roles');
const userRoleTable = Config.get('rolePermission.user_role_table', 'link_accounts_roles');


// node ace make:middleware role
export default class Role {
	// .middleware(['auth', 'role:admin,moderator'])
	public async handle(
		{ auth, response }: HttpContextContract,
		next: () => Promise<void>,
		userRoles: string[]
	) {
		// Check if user is logged-in or not.
		// let expression = "";
		// if (Array.isArray(args)) {
		// 	expression = args.join(" || ");
		// }

		let user = await auth.user;
		if (!user) {
			return response.unauthorized({ error: 'Must be logged in' });
		}

		let hasRole = await this.checkHasRoles(user, userRoles);
		if (!hasRole) {
			// return response.unauthorized({
			// 	error: `Doesn't have required role(s): ${userRoles.join(',')}`,
			// 	// error: `Doesn't have required role(s)`,
			// });
			throw new Exception(`Doesn't have required role(s): ${userRoles.join(',')}`, 401);
		}

		// code for middleware goes here. ABOVE THE NEXT CALL
		await next();
	}

	private async checkHasRoles(user: User, userRoles: string[]): Promise<boolean> {
		// await user.load("roles");
		// const ok = user.roles.map((role) => role.name);
		// const roles = await user.getRoles();

		let rolePlaceHolder = '(';
		let placeholders = new Array(userRoles.length).fill('?');
		rolePlaceHolder += placeholders.join(',');
		rolePlaceHolder += ')';

		// const roles = await user
		// 	.related('roles')
		// 	.query()
		// 	.count('*')	// .select('name')
		// 	.whereIn('name', userRoles);
		// // .groupBy('name');

		// select count(*) as roleCount
		// from gba.roles
		// inner join gba.link_accounts_roles
		// on "roles"."id" = "link_accounts_roles"."role_id"
		// where ("name" in ('administrator', 'editor')) and ("link_accounts_roles"."account_id" = 1)

		let {
			rows: {
				0: { rolecount },
			},
		} = await Database.rawQuery(
			'SELECT count("r"."id") as roleCount FROM ' +
				roleTable +
				' r INNER JOIN ' +
				userRoleTable +
				' ur ON r.id=ur.role_id WHERE "ur"."account_id"=? AND "r"."name" in ' +
				rolePlaceHolder +
				' LIMIT 1',
			[user.id, ...userRoles]
		);

		return rolecount > 0;
	}
}