21 lines
571 B
JavaScript
21 lines
571 B
JavaScript
module.exports = function authorizeMiddleware (authApi) {
|
|
return function (req, res, next) {
|
|
req.profiler.done('req2params.setup');
|
|
|
|
authApi.authorize(req, res, (err, authorized) => {
|
|
req.profiler.done('authorize');
|
|
if (err) {
|
|
return next(err);
|
|
}
|
|
|
|
if(!authorized) {
|
|
err = new Error("Sorry, you are unauthorized (permission denied)");
|
|
err.http_status = 403;
|
|
return next(err);
|
|
}
|
|
|
|
return next();
|
|
});
|
|
};
|
|
};
|