Add get_admin_user guard for routes

master
Alix JEUDI--LEMOINE 1 week ago
parent 597cef0c22
commit 2bd8ffd591

@ -41,6 +41,14 @@ async def get_current_user(token: str = Depends(oauth2_scheme)) -> User:
return user_serialize(user) return user_serialize(user)
async def get_admin_user(current_user: User = Depends(get_current_user)):
if not current_user.is_admin:
raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN,
detail="You don't have admin privileges"
)
return current_user
def create_access_token(data: dict, expires_delta: timedelta): def create_access_token(data: dict, expires_delta: timedelta):
to_encode = data.copy() to_encode = data.copy()

Loading…
Cancel
Save