chore: normalize code

imphnen-iam/src/v1/permissions/permissions_guard.rs

@@ -0,0 +1,42 @@
+use super::PermissionsEnum;
+use crate::{common_response, extract_email, AppState, AuthRepository};
+use axum::{
+	http::{HeaderMap, StatusCode},
+	response::Response,
+};
+
+pub async fn permissions_guard(
+	headers: &HeaderMap,
+	state: AppState,
+	required_permissions: Vec<PermissionsEnum>,
+) -> Result<(), Response> {
+	let auth_repo = AuthRepository::new(&state);
+	let email = extract_email(headers).ok_or_else(|| {
+		common_response(
+			StatusCode::UNAUTHORIZED,
+			"Invalid or missing authorization token",
+		)
+	})?;
+	let raw_user = auth_repo
+		.query_get_stored_user(email.clone())
+		.await
+		.map_err(|_| {
+			common_response(
+				StatusCode::UNAUTHORIZED,
+				"User session expired or not found",
+			)
+		})?;
+	let role = raw_user.role;
+	let role_permissions: Vec<String> =
+		role.permissions.into_iter().map(|perm| perm.name).collect();
+	let has_all_permissions = required_permissions
+		.iter()
+		.all(|required| role_permissions.contains(&required.to_string()));
+	if !has_all_permissions {
+		return Err(common_response(
+			StatusCode::FORBIDDEN,
+			"You don't have the required permissions",
+		));
+	}
+	Ok(())
+}