Simple Route

exam2/vendor/auth/auth.php

@@ -0,0 +1,28 @@
+<?php
+
+class Auth
+{
+  public static function hasPermission(string $required)
+  {
+    $db = Database::getInstance();
+
+    if (!isset($_SERVER["HTTP_TOKEN"])) return false;
+    $token = $_SERVER["HTTP_TOKEN"];
+
+    $query =
+      "SELECT
+        UserPermissions.Permission
+      FROM
+        UserPermissions, Users
+      WHERE
+        Users.ID = UserPermissions.fkUserID AND
+        Users.Token = :TOKEN";
+
+    $stmt = $db->prepare($query);
+    $stmt->bindValue(":TOKEN", $token);
+    $stmt->execute();
+    $perms = $stmt->fetchAll(PDO::FETCH_COLUMN, 0);
+
+    return in_array($required, $perms);
+  }
+}