feat: Implement api/v1/users/:userId API endpoint

This commit is contained in:
Faruk AYDIN
2024-02-13 03:44:44 +01:00
parent 9f0e0ca656
commit 824c434b0b
7 changed files with 107 additions and 3 deletions

View File

@@ -0,0 +1,18 @@
const authorizationList = {
'/api/v1/users/:userId': {
action: 'read',
subject: 'User',
},
};
export const authorizeUser = async (request, response, next) => {
const currentRoute = request.baseUrl + request.route.path;
const currentRouteRule = authorizationList[currentRoute];
try {
request.currentUser.can(currentRouteRule.action, currentRouteRule.subject);
next();
} catch (error) {
return response.status(403).end();
}
};