Authorise middleware for use with passportjs or similar

gistfile1.js

//
// check that the user has the correct role for access to the route.
// to use, ensure that user has a roles array then add the following to routes
//
//   app.get('/admin-route', app.authorise('admin', 'super-admin'), function (req, res) { ... })
//
app.authorise =  app.authorize = function () {
  var roles = Array.prototype.slice.call(arguments)
  return function (req, res, next) {
    if (req.user && _.any(roles, function (role) {
      return req.user.roles.indexOf(role) !== -1
    })) {
      next()
    }
    else {
      res.send(403)
    }
  }
}