express-route-guard/index.js

A simple Express middleware for role-based access control.

module.exports = function routeGuard(allowedRoles = []) {
    return (req, res, next) => {
        if (!req.user || !allowedRoles.includes(req.user.role)) {
            return res.status(403).json({ error: "Access denied" });
        }
        next();
    };
};