How use guard in nitro or specific middleware to a route

[Cyrs2001]

i wanna secure
each api route with specific permission

[stafyniaksacha]

You can create your own custom createEventHandler like

export interface PrivateContext {
  user: Record<string, any>
}

export function definePrivateEventHandler<T>(
  handler: (event: H3Event, cxt: PrivateContext) => T,
  options: { requireAuth: boolean } = { requireAuth: true }
) {
  return defineEventHandler(async (event) => {
    // you can check request hmac, user, token, etc..
    const token = event.node.req.headers['authorization']
    const user = await getUser(token)

    if (options.requireAuth && !user) {
      throw createError({
        statusCode: 401,
        statusMessage: 'Unauthorized',
      })
    }

    return handler(event, {
      user,
    })
  })
})

then use it in replacement of defineEventHandler:

export default definePrivateEventHandler(async (event, { user }) => {
  //
})

// or public

export default definePrivateEventHandler(async (event, { user }) => {
  //
}, { requireAuth: false })