Firewall->hasRole()

docs/README.md

@@ -247,6 +247,7 @@ $firewall->login($identity);
 $firewall->isLoggedIn(); // true
 $firewall->getIdentity(); // $identity
 $firewall->getAuthenticationTime(); // Instant
+$firewall->hasRole($role); // bool
 ```
 
 #### Set or remove login expiration

src/Authentication/BaseFirewall.php

@@ -137,6 +137,17 @@ public function getAuthenticationTime(): Instant
 		return $login->getAuthenticationTime();
 	}
 
+	public function hasRole(string $role): bool
+	{
+		$identity = $this->fetchIdentity();
+
+		if ($identity === null) {
+			return false;
+		}
+
+		return $identity->hasRole($role);
+	}
+
 	/**
 	 * @throws CannotSetExpiration When expiration is set before user is logged in
 	 */

src/Authentication/Firewall.php

@@ -42,6 +42,8 @@ public function logout(): void;
 	 */
 	public function getIdentity(): Identity;
 
+	public function hasRole(string $role): bool;
+
 	/**
 	 * @throws CannotGetAuthenticationTime When user is not logged id
 	 */

tests/Unit/Authentication/BaseFirewallTest.php

@@ -92,6 +92,20 @@ public function testIdentityClassUpdate(): void
 		self::assertSame($renewedIdentity, $firewall->getLogins()->getCurrentLogin()->getIdentity());
 	}
 
+	public function testHasRole(): void
+	{
+		$identity = new IntIdentity(123, ['foo']);
+
+		$storage = new ArrayLoginStorage();
+		$firewall = new TestingFirewall($storage, $this->renewer());
+
+		self::assertFalse($firewall->hasRole('foo'));
+
+		$firewall->login($identity);
+		self::assertTrue($firewall->hasRole('foo'));
+		self::assertFalse($firewall->hasRole('bar'));
+	}
+
 	public function testExpiredIdentities(): void
 	{
 		$storage = new ArrayLoginStorage();