feat: 增加登录鉴权和固定角色权限

src/shared/http-error.ts

@@ -32,3 +32,7 @@ export function internalServerError(message: string): HttpError {
 export function unauthorized(message: string): HttpError {
   return new HttpError(401, "UNAUTHORIZED", message);
 }
+
+export function forbidden(message: string): HttpError {
+  return new HttpError(403, "FORBIDDEN", message);
+}