Require admin to create users

server/server.go

@@ -8,6 +8,8 @@ import (
 	"net/http"
 	"os"
 
+	"git.t-juice.club/microfilm/auth"
+	"git.t-juice.club/microfilm/auth/authmw"
 	"git.t-juice.club/microfilm/users"
 	"git.t-juice.club/microfilm/users/store"
 	"github.com/go-chi/chi/v5"
@@ -34,8 +36,10 @@ func NewServer(config *Config) (*UserServer, error) {
 
 	r.Use(srv.MiddlewareLogging)
 
+	verifyAdmin := authmw.VerifyToken("http://mf-auth:8082", []string{auth.RoleAdmin})
+
 	r.Get("/info", InfoHandler)
-	r.Post("/", srv.CreateUserHandler)
+	r.With(verifyAdmin).Post("/", srv.CreateUserHandler)
 	r.Post("/{identifier}/password", srv.SetPasswordHandler)
 	r.Post("/{identifier}/verify", srv.VerifyHandler)