Go REST Api中的角色和权限

Question

I'm developing an REST API in go, it's implementing jwt following this schema :

I've a middleware that verify tokens and my problem is that I want another one to add roles and permissions on some path in my API

Could you guys give some tips pls ? My project is on github as you can see all the code : repository

Thanks