67 lines
1.9 KiB
TypeScript
67 lines
1.9 KiB
TypeScript
|
import { HttpContextContract } from '@ioc:Adonis/Core/HttpContext'
|
||
|
|
import Config from '@ioc:Adonis/Core/Config'
|
||
|
|
import Database from '@ioc:Adonis/Lucid/Database'
|
||
|
|
import User from 'App/Models/User'
|
||
|
|
// import { Exception } from '@adonisjs/core/build/standalone'
|
||
|
|
|
||
|
|
const roleTable = Config.get('rolePermission.role_table', 'roles')
|
||
|
|
const userRoleTable = Config.get('rolePermission.user_role_table', 'user_roles')
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Role authentication to check if user has any of the specified roles
|
||
|
|
*
|
||
|
|
* Should be called after auth middleware
|
||
|
|
*/
|
||
|
|
export default class Is {
|
||
|
|
/**
|
||
|
|
* Handle request
|
||
|
|
*/
|
||
|
|
public async handle(
|
||
|
|
{ auth, response }: HttpContextContract,
|
||
|
|
next: () => Promise<void>,
|
||
|
|
roleNames: string[]
|
||
|
|
) {
|
||
|
|
/**
|
||
|
|
* Check if user is logged-in or not.
|
||
|
|
*/
|
||
|
|
let user = await auth.user
|
||
|
|
if (!user) {
|
||
|
|
return response.unauthorized({ error: 'Must be logged in' })
|
||
|
|
}
|
||
|
|
let hasRole = await this.checkHasRoles(user, roleNames)
|
||
|
|
if (!hasRole) {
|
||
|
|
return response.unauthorized({
|
||
|
|
error: `Doesn't have required role(s): ${roleNames.join(',')}`,
|
||
|
|
})
|
||
|
|
// return new Exception(`Doesn't have required role(s): ${roleNames.join(',')}`,
|
||
|
|
// 401,
|
||
|
|
// "E_INVALID_AUTH_UID");
|
||
|
|
}
|
||
|
|
await next()
|
||
|
|
}
|
||
|
|
|
||
|
|
private async checkHasRoles(user: User, roleNames: Array<string>): Promise<boolean> {
|
||
|
|
let rolePlaceHolder = '('
|
||
|
|
let placeholders = new Array(roleNames.length).fill('?')
|
||
|
|
rolePlaceHolder += placeholders.join(',')
|
||
|
|
rolePlaceHolder += ')'
|
||
|
|
|
||
|
|
let {
|
||
|
|
0: {
|
||
|
|
0: { roleCount },
|
||
|
|
},
|
||
|
|
} = await Database.rawQuery(
|
||
|
|
'SELECT count(`ur`.`id`) as roleCount FROM ' +
|
||
|
|
userRoleTable +
|
||
|
|
' ur INNER JOIN ' +
|
||
|
|
roleTable +
|
||
|
|
' r ON ur.role_id=r.id WHERE `ur`.`user_id`=? AND `r`.`name` in ' +
|
||
|
|
rolePlaceHolder +
|
||
|
|
' LIMIT 1',
|
||
|
|
[user.id, ...roleNames]
|
||
|
|
)
|
||
|
|
|
||
|
|
return roleCount > 0
|
||
|
|
}
|
||
|
|
}
|