feat: get roles associted to api key

src/routes/v1/apikey.rs

@@ -8,6 +8,7 @@ use rand::RngCore;
 use rand::rngs::OsRng;
 
 use crate::dto::api::{CreateApiKeyRequest, CreateApiKeyResponse};
+use crate::middlewares::auth::apikey::ApiKeyClaimsRoles;
 use crate::middlewares::auth::middleware::Auth;
 use crate::state::app_state::AppState;
 use crate::utils::crypto::hash_key;
@@ -23,15 +24,14 @@ pub async fn create_api_key(
     Extension(claims): Extension<Auth>,
     Json(body): Json<CreateApiKeyRequest>,
 ) -> Result<Json<CreateApiKeyResponse>, StatusCode> {
-    if matches!(claims, Auth::ApiKey(_)) {
+    if matches!(&claims, Auth::ApiKey(api_key) if !api_key.roles.contains(&ApiKeyClaimsRoles::Admin))
+    {
         return Err(StatusCode::FORBIDDEN);
     }
 
     let raw_key = generate_api_key();
     let key_hash = hash_key(&raw_key);
 
-    dbg!(&claims);
-
     sqlx::query!(
         r#"
         INSERT INTO auth.api_key (key_hash, name, created_by, scopes)