diff --git a/app/routes/utils.py b/app/routes/utils.py index a9b3267..f7e3764 100644 --- a/app/routes/utils.py +++ b/app/routes/utils.py @@ -41,6 +41,14 @@ async def get_current_user(token: str = Depends(oauth2_scheme)) -> User: return user_serialize(user) +async def get_admin_user(current_user: User = Depends(get_current_user)): + if not current_user.is_admin: + raise HTTPException( + status_code=status.HTTP_403_FORBIDDEN, + detail="You don't have admin privileges" + ) + return current_user + def create_access_token(data: dict, expires_delta: timedelta): to_encode = data.copy()