gistfile1.clj

(server/add-middleware 
  friend/authenticate
  { :credential-fn (partial creds/bcrypt-credential-fn users)
    :workflows [(workflows/interactive-form)]
    :login-uri "/login"
    :unauthorized-redirect-uri "/login"
    :default-landing-uri "/" })

(pre-route [:any "/app/*"] { :as req } (let [id (friend/identity req)]
  (when-not (friend/authorized? [::user] id) (friend/throw-unauthorized id {}))))

(pre-route [:any "/admin/*"] { :as req } (let [id (friend/identity req)]
  (when-not (friend/authorized? [::admin] id) (friend/throw-unauthorized id { :unauthorized-redirect-uri "/blarg" }))))