from fastapi import Request, Depends
from fastapi.responses import HTMLResponse, RedirectResponse


def get_current_user(request: Request) -> dict | None:
    return request.session.get("user")


def require_role(*roles: str):
    def dependency(request: Request, user: dict = Depends(get_current_user)):
        if not user:
            return RedirectResponse(url="/service/login", status_code=302)
        if roles and user["role"] not in roles:
            return HTMLResponse(content="Доступ запрещён", status_code=403)
        return user
    return dependency