user.go

package auth

import (
	"net/http"

	"github.com/jinzhu/gorm"
	"github.com/labstack/echo"
	"github.com/nguyentrungtin/go-echo-boilerplate/db"
	"github.com/nguyentrungtin/go-echo-boilerplate/lib"
	"github.com/nguyentrungtin/go-echo-boilerplate/model"
)

func User() echo.MiddlewareFunc {
	return func(next echo.HandlerFunc) echo.HandlerFunc {
		return func(c echo.Context) error {
			id, ok := GetUserID(c)
			if !ok {
				return echo.ErrUnauthorized
			}

			user := model.User{}
			db := db.Session()
			if err := db.Where("id = ?", id).First(&user).Error; gorm.IsRecordNotFoundError(err) {
				return echo.NewHTTPError(http.StatusBadGateway, "User is no longer exist!")
			}

			_, can := lib.Find(RBAC.UserRBAC, user.Role)
			_, higher := lib.Find([]string{"SUPER", "ADMIN"}, user.Role)
			if !can && !higher {
				return echo.ErrForbidden
			}

			return next(c)
		}
	}
}