Middleware

delegate object? FusionMiddleware(FusionRequest request, Func<FusionRequest, object?> callNext);

var MIDDLEWARE = new List<FusionMiddleware>
{
    // Middleware.BearerJwt(),
};

using var app = new FusionApp(SettingsStore.GetSettings());
foreach (var mw in MIDDLEWARE) app.Use(mw);
app.Listen();

FusionMiddleware RequireApiKey = (request, callNext) =>
{
    if (!request.Headers.TryGetValue("x-api-key", out var key) || key != "secret")
        return new Dictionary<string, object?>
        {
            ["status"] = 401,
            ["body"] = new { detail = "invalid api key" },
        };
    return callNext(request);
};

MIDDLEWARE.Add(Middleware.BearerJwt()); // optional verify: callback

[Route("/api/admin", Roles = new[] { "admin" })]
public class AdminModule : FusionBaseApi
{
    public object Get() => Response(new { ok = true });
}

Middleware.RequireRoles("admin", "super_admin");
Middleware.RequireRoles(new[] { "admin" }, claim: "roles", stateKey: "jwt");