auth0-extensions/auth0-delegated-administration-extension

import { ForbiddenError } from 'auth0-extension-tools';

export default (expectedScope) => (req, res, next) => {
  if (!req.user || !req.user.scope || req.user.scope.indexOf(expectedScope) < 0) {
    return next(new ForbiddenError(`Cannot perform action. Missing scope ${expectedScope}`));
  }

  return next();
};