diff --git a/src/middleware/auth.middleware.js b/src/middleware/auth.middleware.js index 783af80e..84a861ea 100644 --- a/src/middleware/auth.middleware.js +++ b/src/middleware/auth.middleware.js @@ -66,6 +66,10 @@ async function authenticateToken(req, res, next) { /** * Check if user has required role + * + * Role-based access control (RBAC) middleware + * Verifies that the authenticated user possesses at least one of the required roles + * before allowing access to protected routes */ function requireRole(...roles) { return (req, res, next) => {