Function withoutRole

website/src/lib/auth.ts:9–18

(role: Role, handler: (arg0: NextApiRequest, arg1: NextApiResponse, arg2: JWT) => void)

 * specified role.  Returns a 403 if they do, otherwise runs the handler.
 */
const withoutRole = (role: Role, handler: (arg0: NextApiRequest, arg1: NextApiResponse, arg2: JWT) => void) => {
  return async (req: NextApiRequest, res: NextApiResponse) => {
    const token = await getToken({ req });
    if (!token || token.role === role) {
      res.status(403).end();
      return;
    }
    return handler(req, res, token);
  };
};

/**
 * Wraps any API Route handler and verifies that the user has the appropriate