segunolalive/helloBooks

/**
 * checks if user is admin
 *
 * @param  {Object}   req     HTTP request object
 * @param  {Object}   res     HTTP response object
 * @param  {Function} next    calls the next middleware Function
 *
 * @returns {Function|Object}  calls next or returns a response
 */
const ensureIsAdmin = (req, res, next) => (
  req.user && req.user.isAdmin ?
    next() :
    res.status(401).send({
      message: 'Unauthorized access',
    })
);

export default ensureIsAdmin;