test news

app/services/auth.py

@@ -42,7 +42,8 @@ class AuthService:
             uuid=user_uuid,
             is_verified=False,
             code=None,
-            code_expires_at=None
+            code_expires_at=None,
+            is_admin=False
         )
         await users_collection.insert_one(new_user.dict())
         return {"status": "success", "uuid": user_uuid}
@@ -130,6 +131,17 @@ class AuthService:
         if not session or datetime.utcnow() > session["expires_at"]:
             return False
         return True
+    
+    async def is_admin(self, access_token: str, client_token: str) -> bool:
+        session = await sessions_collection.find_one({
+            "access_token": access_token,
+            "client_token": client_token,
+        })
+        if not session:
+            return False
+        
+        user = await users_collection.find_one({"uuid": session["user_uuid"]})
+        return user and user.get("is_admin") is True
 
     async def refresh(self, access_token: str, client_token: str):
         if not await self.validate(access_token, client_token):