tethys.backend/app/Middleware/Is.ts

import { HttpContextContract } from '@ioc:Adonis/Core/HttpContext'
import Config from '@ioc:Adonis/Core/Config'
import Database from '@ioc:Adonis/Lucid/Database'
import User from 'App/Models/User'
// import { Exception } from '@adonisjs/core/build/standalone'

const roleTable = Config.get('rolePermission.role_table', 'roles')
const userRoleTable = Config.get('rolePermission.user_role_table', 'user_roles')

/**
 * Role authentication to check if user has any of the specified roles
 *
 * Should be called after auth middleware
 */
export default class Is {
  /**
   * Handle request
   */
  public async handle(
    { auth, response }: HttpContextContract,
    next: () => Promise<void>,
    roleNames: string[]
  ) {
    /**
     * Check if user is logged-in or not.
     */
    let user = await auth.user
    if (!user) {
      return response.unauthorized({ error: 'Must be logged in' })
    }
    let hasRole = await this.checkHasRoles(user, roleNames)
    if (!hasRole) {
      return response.unauthorized({
        error: `Doesn't have required role(s): ${roleNames.join(',')}`,
      })
      // return new Exception(`Doesn't have required role(s): ${roleNames.join(',')}`,
      // 401,
      // "E_INVALID_AUTH_UID");  
    }
    await next()
  }

  private async checkHasRoles(user: User, roleNames: Array<string>): Promise<boolean> {
    let rolePlaceHolder = '('
    let placeholders = new Array(roleNames.length).fill('?')
    rolePlaceHolder += placeholders.join(',')
    rolePlaceHolder += ')'

    let {
      0: {
        0: { roleCount },
      },
    } = await Database.rawQuery(
      'SELECT count(`ur`.`id`) as roleCount FROM ' +
        userRoleTable +
        ' ur INNER JOIN ' +
        roleTable +
        ' r ON ur.role_id=r.id WHERE `ur`.`user_id`=? AND `r`.`name` in ' +
        rolePlaceHolder +
        ' LIMIT 1',
      [user.id, ...roleNames]
    )

    return roleCount > 0
  }
}