widget cache

lib/redis.ts

@@ -727,4 +727,60 @@ export async function invalidateMessagesCache(
   } catch (error) {
     console.error(`Error invalidating messages cache for user ${userId}:`, error);
   }
-} 
+}
+
+const hasRole = (requiredRole: string | string[] | undefined) => {
+  // Early returns for invalid cases
+  if (!requiredRole) {
+    console.log('No required role specified');
+    return false;
+  }
+  
+  if (!session?.user?.role) {
+    console.log('No user roles found');
+    return false;
+  }
+  
+  // Extract user roles and normalize them consistently
+  const userRoles = Array.isArray(session.user.role) ? session.user.role : [session.user.role];
+  const cleanUserRoles = userRoles.map(role => typeof role === 'string' ? 
+    role.replace(/^[\/]/, '')  // Remove leading slash
+        .replace(/^ROLE_/, '') // Remove ROLE_ prefix
+        .replace(/^default-roles-[^/]*\//i, '') // Remove realm prefix
+        .toLowerCase()
+    : '').filter(Boolean);
+  
+  console.log('Debug roles:', {
+    rawUserRoles: session.user.role,
+    processedUserRoles: cleanUserRoles,
+    requiredRole
+  });
+  
+  // Check against array of required roles
+  if (Array.isArray(requiredRole)) {
+    const cleanRequiredRoles = requiredRole.map(role => 
+      typeof role === 'string' ? role.toLowerCase() : ''
+    ).filter(Boolean);
+    
+    console.log('Checking multiple roles:', {
+      requiredRoles: requiredRole,
+      cleanRequiredRoles,
+      userRoles: cleanUserRoles,
+      hasAnyRole: cleanRequiredRoles.some(role => cleanUserRoles.includes(role))
+    });
+    
+    return cleanRequiredRoles.some(role => cleanUserRoles.includes(role));
+  }
+  
+  // Check against single required role
+  const cleanRequiredRole = typeof requiredRole === 'string' ? requiredRole.toLowerCase() : '';
+  
+  console.log('Checking single role:', {
+    requiredRole,
+    cleanRequiredRole,
+    userRoles: cleanUserRoles,
+    hasRole: cleanUserRoles.includes(cleanRequiredRole)
+  });
+  
+  return cleanUserRoles.includes(cleanRequiredRole);
+};