diff options
Diffstat (limited to 'routes/admin.js')
| -rw-r--r-- | routes/admin.js | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/routes/admin.js b/routes/admin.js index 35b208b..bdd4f9b 100644 --- a/routes/admin.js +++ b/routes/admin.js @@ -7,7 +7,9 @@ var passport = require('passport'); var csrfProtection = csrf(); router.use(csrfProtection); // router is protected -router.get('/', function(req,res){ + + +router.get('/', isAdmin, function(req,res){ res.render('admin', {csrfToken: req.csrfToken()}); }); @@ -102,3 +104,13 @@ function parseStringArray(input){ module.exports = router; + +/************** Route protection ********************/ + +function isAdmin(req, res, next) { + if (!req.user.email){ + return next(); + } + res.redirect('/'); +} + |
