add permission

src/plugins/keycloak.ts

@@ -11,7 +11,21 @@ const initOptions = {
 
 const keycloak = Keycloak(initOptions);
 
-keycloak.onAuthSuccess = () => {}; //เพิ่มlogin สำเร็จจะมาทำฟังก์ชันนี้
+keycloak.onAuthSuccess = () => {
+  // check role user
+  const hasCommonValues = (array1: string[], array2: string[]): boolean => {
+    return array1.some((element) => array2.includes(element));
+  };
+
+  const role = keycloak.tokenParsed?.role;
+  const roleSys = ["SUPER_ADMIN", "ADMIN"];
+  const checkPermission = hasCommonValues(role, roleSys);
+  if (!checkPermission) {
+    keycloak.logout({
+      redirectUri: `${window.location.protocol}//${window.location.host}/`,
+    });
+  }
+}; //เพิ่มlogin สำเร็จจะมาทำฟังก์ชันนี้
 
 await keycloak.init({ onLoad: "check-sso", checkLoginIframe: false }); //ทำการ connect keycloak
 export default keycloak;