somewhere

middleware/auth-admin.js

@@ -0,0 +1,4 @@
+export default function ({ $auth, redirect }) {
+  if ($auth.loggedIn && $auth.hasScope('admin')) return true
+  else return redirect('/auth/login-register')
+}

middleware/auth-user.js

@@ -0,0 +1,5 @@
+export default function ({ $auth, redirect, route }) {
+  if (!$auth.loggedIn || !$auth.hasScope('user')) return redirect('/auth/login-register')
+  if (!$auth.user.email_confirmed && route.name !== 'account-verify') return redirect('/account/verify')
+  return true
+}

middleware/permissions.js

@@ -0,0 +1,16 @@
+export default async function ({ $auth, redirect, route }) {
+  try {
+    if (route.name === 'admin') {
+      return true
+    } else {
+      let hasPermission = false
+      for await (const permission of $auth.user.permissions) {
+        if ((await route.name.includes(permission)) && permission !== '') hasPermission = true
+      }
+      if (hasPermission) return true
+      else redirect('/admin')
+    }
+  } catch (e) {
+    redirect('/admin')
+  }
+}