Ensure all the API routes reject banned users

website/src/pages/api/update_task.ts

@@ -1,5 +1,5 @@
 import { Prisma } from "@prisma/client";
-import { getToken } from "next-auth/jwt";
+import { withoutRole } from "src/lib/auth";
 import { oasstApiClient } from "src/lib/oasst_api_client";
 import prisma from "src/lib/prismadb";
 
@@ -13,15 +13,7 @@ import prisma from "src/lib/prismadb";
  * 4) Records the new task in our local database.
  * 5) Returns the newly created task to the client.
  */
-const handler = async (req, res) => {
-  const token = await getToken({ req });
-
-  // Return nothing if the user isn't registered.
-  if (!token) {
-    res.status(401).end();
-    return;
-  }
-
+const handler = withoutRole("banned", async (req, res, token) => {
   // Parse out the local task ID and the interaction contents.
   const { id: frontendId, content, update_type } = await JSON.parse(req.body);
 
@@ -65,6 +57,6 @@ const handler = async (req, res) => {
 
   // Send the next task in the sequence to the client.
   res.status(200).json(newRegisteredTask);
-};
+});
 
 export default handler;