Passport js and express js. How to create roles?

Question

Node.js

Hello! There is a mongoose schema like this:

var mongoose = require('mongoose');
  module.exports = mongoose.model('Admin',{
    username: String,
    password: String,
    role: { type: String, default: "user" },
    soft_token: { type: String, default: 0 }
});

How to deny access to the page using passportjs depending on whether the user is admin or user.

Answer 1

Decided like this:

var isAuthenticated = function (req, res, next) {
  var currentUserId = req.user ? req.user.id : false;
  if(!currentUserId){
    res.redirect('/');
    return;
  }
  Admin.findById(currentUserId,function (err, user) {
    if(!user || user.role !== "admin"){
      res.redirect('/');
    }else{
      next();
    }
  })
}

router:

router.get('/admin', isAuthenticated, function(req, res, next) {
    
    res.end();
  });

Now a simple user will not be able to go to "/admin"