feat(auth): check for admin role

2026-09-21 17:58:15 +07:00
parent c5af3a63d4
commit 481123eec0
3 changed files with 7 additions and 2 deletions
@@ -8,14 +8,17 @@ const verified = {
  id: "admin",
  email: "[email protected]",
  emailVerified: true,
+  role: "admin",
 };

 describe("admin authorization", () => {
-  it("allows any verified credential user", () => {
+  it("allows only verified admins", () => {
    expect(isAuthorizedAdmin(verified)).toBe(true);
    expect(
      isAuthorizedAdmin({ ...verified, emailVerified: false }),
    ).toBe(false);
+    expect(isAuthorizedAdmin({ ...verified, role: "user" })).toBe(false);
+    expect(isAuthorizedAdmin({ ...verified, role: null })).toBe(false);
  });

  it("denies missing users", () => {