middlewares.js 672 B

123456789101112131415161718192021222324252627
  1. exports.adminRequired = function() {
  2. return function(req, res, next) {
  3. if (req.user && '_id' in req.user) {
  4. if (req.user.admin) {
  5. next();
  6. return;
  7. }
  8. return res.redirect('/');
  9. }
  10. return res.redirect('/login');
  11. };
  12. };
  13. exports.loginRequired = function() {
  14. return function(req, res, next) {
  15. if (req.user && '_id' in req.user) {
  16. // TODO 移行おわったら削除
  17. if (req.user.email && !req.user.password && req.route.path != '/me/password') {
  18. return res.redirect('/me/password');
  19. }
  20. return next();
  21. }
  22. req.session.jumpTo = req.originalUrl;
  23. return res.redirect('/login');
  24. };
  25. };