Authorization Middleware

Definitions

Middleware that enforces access rules on requests after identity has been established but before business logic executes. It is commonly used to apply route-level role checks, token-scope validation, or coarse policy enforcement consistently across an application.
In plain English: Middleware that checks whether an already-identified user has permission to continue.
Example: "The API looked authenticated, but missing authorization middleware meant any logged-in user could reach admin-only endpoints."