ajinkya-mhetre-mern/backend/src/middleware/roleCheck.js

A MERN starter with frontend and backend folders

// ===== src/middleware/roleCheck.js =====
const checkRole = (...roles) => {
  return (req, res, next) => {
    if (!roles.includes(req.user.role)) {
      return res.status(403).json({ 
        message: 'Access denied. Insufficient permissions.' 
      });
    }
    next();
  };
};

const checkVerified = (req, res, next) => {
  if (req.user.role === 'farmer' && !req.user.isVerified) {
    return res.status(403).json({ 
      message: 'Account not verified. Please wait for admin approval.' 
    });
  }
  next();
};

module.exports = { checkRole, checkVerified };