removed admin middleware, also provider is now dynamically set on unauthorized page button url
This commit is contained in:
@@ -115,14 +115,4 @@ passport.use('tumblr', new OAuthStrategy({
|
||||
exports.ensureAuthenticated = function ensureAuthenticated(req, res, next) {
|
||||
if (req.isAuthenticated()) return next();
|
||||
res.redirect('/login');
|
||||
};
|
||||
|
||||
exports.ensureAdmin = function ensureAdmin(req, res, next) {
|
||||
return function(req, res, next) {
|
||||
console.log(req.user);
|
||||
if(req.user && req.user.admin === true)
|
||||
next();
|
||||
else
|
||||
res.send(403);
|
||||
};
|
||||
};
|
Reference in New Issue
Block a user