servers.js.js

const express = require('express');
const acl = require('express-acl');

const app = express();
app.use(express.json());

// Debugging Middleware to Log Requests
app.use((req, res, next) => {
    console.log("Received Headers:", req.headers);
    req.user = { role: req.headers["role"] || "guest" }; // Default to "guest"
    console.log("Assigned Role:", req.user.role);
    next();
});

// ACL Configuration
acl.config({
    baseUrl: "",  // Set to "" so it applies to all routes correctly
    rules: [
        {
            group: "admin",
            permissions: [
                { resource: "admin", methods: ["GET", "POST", "DELETE"], action: "allow" },
                { resource: "user", methods: ["GET"], action: "allow" }
            ]
        },
        {
            group: "user",
            permissions: [
                { resource: "user", methods: ["GET"], action: "allow" },
                { resource: "admin", methods: ["GET"], action: "deny" }
            ]
        },
        {
            group: "guest",
            permissions: [
                { resource: "guest", methods: ["GET"], action: "allow" }
            ]
        }
    ]
});

// Apply ACL middleware AFTER role assignment
app.use(acl.authorize);

// Protected Routes
app.get('/admin', (req, res) => {
    res.send("Welcome to Admin Dashboard");
});

app.get('/user', (req, res) => {
    res.send("Welcome User");
});

app.get('/guest', (req, res) => {
    res.send("Welcome Guest");
});

// Start Server
app.listen(3000, () => console.log("🚀 Server running on port 3000"));