sarlink-portal/lib/auth-guard.ts

"use server";
import { auth } from "@/lib/auth";
import { headers } from "next/headers";
import { redirect } from "next/navigation";

export async function AdminAuthGuard() {
	const session = await auth.api.getSession({
		headers: await headers(),
	});
	if (session?.user.role !== "ADMIN") {
		return redirect("/login");
	}
	return true;
}