How can I implement role-based authentication in Node.js?

How can I implement role-based authentication in Node.js?

You can implement role-based authentication in Node.js using middleware to check user roles before granting access to certain routes.

What libraries should I use for this?

You can use libraries like Passport.js for authentication and JSON Web Tokens (JWT) for managing user sessions.

Can you give me a code example?

Sure! Here's a simple example using Express and JWT:

const express = require('express');
const jwt = require('jsonwebtoken');

const app = express();

// Middleware to check roles
function checkRole(role) {
    return (req, res, next) => {
        const token = req.headers['authorization'];
        if (!token) return res.sendStatus(403);
        jwt.verify(token, 'your_secret_key', (err, user) => {
            if (err) return res.sendStatus(403);
            if (user.role !== role) return res.sendStatus(403);
            next();
        });
    };
}

app.get('/admin', checkRole('admin'), (req, res) => {
    res.send('Welcome Admin!');
});

This code checks if the user has the 'admin' role before allowing access to the '/admin' route.

What if I want to add more roles?

You can modify the checkRole middleware to accept an array of roles and check if the user's role is included in that array.