import type { H3Event } from "h3";
import type { MinimalUser } from "#server/service/auth";

export async function requireAdmin(event: H3Event): Promise<MinimalUser> {
  const user = await event.context.auth.requireUser();
  if (user.role !== "admin") {
    throw createError({
      statusCode: 403,
      statusMessage: "需要管理员权限",
    });
  }
  return user;
}