From 95d0686eaafd7eecde0af0a006ba941611c49c78 Mon Sep 17 00:00:00 2001 From: regalijan Date: Thu, 19 Oct 2023 16:49:24 -0400 Subject: [PATCH] Move upload permissions check to middleware --- functions/api/uploads/_middleware.ts | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 functions/api/uploads/_middleware.ts diff --git a/functions/api/uploads/_middleware.ts b/functions/api/uploads/_middleware.ts new file mode 100644 index 0000000..178b7c8 --- /dev/null +++ b/functions/api/uploads/_middleware.ts @@ -0,0 +1,13 @@ +export async function onRequest(context: RequestContext) { + const { current_user: currentUser } = context.data; + + if (!(currentUser?.permissions & (1 << 5))) + return new Response('{"error":"Forbidden"}', { + headers: { + "content-type": "application/json", + }, + status: 403, + }); + + return await context.next(); +}