Harden CMS security and theme contrast

src/lib/admin/staff-user.ts

@@ -0,0 +1,21 @@
+import { isStaff } from "@/lib/admin/is-staff";
+
+export interface StaffUserRecord {
+  id: number;
+  rank: number;
+  username: string;
+}
+
+export type FindStaffUser = (id: number) => Promise<StaffUserRecord | null>;
+
+export async function resolveStaffUser(
+  sessionUserId: string,
+  minStaffRank: number,
+  findUser: FindStaffUser,
+): Promise<StaffUserRecord | null> {
+  const id = Number(sessionUserId);
+  if (!Number.isSafeInteger(id) || id <= 0) return null;
+
+  const user = await findUser(id);
+  return user && isStaff(user.rank, minStaffRank) ? user : null;
+}