릴리스: v0.1.6 MariaDB 개발 환경 및 저장소 설정 정리

backend/src/middleware/auth.js

@@ -0,0 +1,13 @@
+function requireAuth(req, res, next) {
+  if (!req.session || !req.session.userId) return res.status(401).json({ error: 'unauthorized' })
+  next()
+}
+
+function requireAdmin(req, res, next) {
+  if (!req.session || !req.session.userId) return res.status(401).json({ error: 'unauthorized' })
+  if (!req.session.isAdmin) return res.status(403).json({ error: 'forbidden' })
+  next()
+}
+
+module.exports = { requireAuth, requireAdmin }
+