Sharaxaad
Authentication wuxuu sheegaa cidda aad tahay. Authorization wuxuu go'aamiyaa waxa aad samayn karto — admin vs student vs owner.
Tusaale code
typescriptfunction requireRole(roles: string[]) {
return (req, res, next) => {
if (!req.user || !roles.includes(req.user.role)) {
return res.status(403).json({ error: "Forbidden" });
}
next();
};
}Agab waxtar leh
Layli
Ilaali DELETE /api/skills/:id si kaliya ADMIN ama milkiilaha u tirtiri karo.
