Files
DemoApp/routes/middleware/restrict_user_to_self.js

9 lines
226 B
JavaScript

function restrictUserToSelf(req, res, next) {
if (! req.session.user || req.session.user.username !== req.user.username) {
res.send('Unauthorized', 401);
} else {
next();
}
}
module.exports = restrictUserToSelf;