import { createApiError } from './apiError'
import { SERVER_ERROR_CODES } from '../config/constants'

const SONG_ADMIN_ROLES = ['SONG_ADMIN', 'ADMIN', 'SUPER_ADMIN']

export function requireSongAdmin(event: any) {
  const user = event.context?.user
  if (!user) {
    throw createApiError(401, SERVER_ERROR_CODES.AUTH_UNAUTHORIZED, '请先登录')
  }
  if (!SONG_ADMIN_ROLES.includes(user.role)) {
    throw createApiError(403, SERVER_ERROR_CODES.AUTH_FORBIDDEN, '没有权限执行此操作')
  }
  return user
}