@point3/logto-module 1.1.5 → 1.1.7

package/errors.ts

@@ -56,3 +56,10 @@ export class SignOutUriGenerationError extends LogtoError {
     }
 }
 
+export class PersonalAccessTokenFetchError extends LogtoError {
+    constructor() {
+        super('Personal Access Token을 사용한 액세스 토큰 발급에 실패했습니다.');
+        this.name = "PersonalAccessTokenFetchError";
+    }
+}
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@point3/logto-module",
-  "version": "1.1.5",
+  "version": "1.1.7",
   "description": "포인트3 내부 logto Authentication 모듈입니다",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -15,15 +15,17 @@
     "@nestjs/common": "^11.1.3",
     "@nestjs/config": "^4.0.2",
     "@nestjs/core": "^11.1.3",
+    "@nestjs/graphql": "^13.2.4",
     "@nestjs/testing": "^11.1.3",
     "axios": "^1.9.0",
     "jest": "^30.0.0",
     "jose": "^5.10.0",
-    "point3-common-tool": "^1.0.13"
+    "point3-common-tool": "^1.0.31"
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "typescript": "^5.8.3"
+    "typescript": "^5.8.3",
+    "@nestjs/core": "^11.1.3"
   },
   "repository": {
     "type": "git",

package/stateless/guard.ts

@@ -1,12 +1,13 @@
-import { 
-  Injectable, 
-  CanActivate, 
-  ExecutionContext, 
-  UnauthorizedException, 
+import {
+  Injectable,
+  CanActivate,
+  ExecutionContext,
+  UnauthorizedException,
   InternalServerErrorException,
-  Inject, 
-  HttpStatus 
+  Inject,
+  HttpStatus
 } from '@nestjs/common';
+import { GqlExecutionContext } from '@nestjs/graphql';
 import { Reflector } from '@nestjs/core';
 import { IncomingHttpHeaders } from 'http';
 
@@ -14,6 +15,7 @@ import { errors } from 'jose';
 
 import { p3Values } from 'point3-common-tool';
 import { LogtoTokenVerifier, LogtoTokenVerifierToken } from '../token';
+import { ConfigService } from '@nestjs/config';
 
 export const LogtoTokenGuardToken = Symbol('LogtoTokenGuard');
 
@@ -21,19 +23,22 @@ export const LogtoTokenGuardToken = Symbol('LogtoTokenGuard');
 export class LogtoTokenGuard implements CanActivate {
   private reflector: Reflector = new Reflector();
   constructor(
-    // @Inject(Reflector)
-    // private reflector: Reflector,
-
     @Inject(LogtoTokenVerifierToken)
-    private tokenVerifier: LogtoTokenVerifier
+    private tokenVerifier: LogtoTokenVerifier,
+
+    private configService: ConfigService
   ) { }
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
+    if (this.configService.get<string>('NODE_ENV') === 'local') {
+      return true;
+    }
+
     //매타데이터에서 필요한 스코프와 역할을 가져온다.
     const requiredScopes = this.reflector.get<string[]>('requiredScopes', context.getHandler());
     const requiredRoles = this.reflector.get<string[]>('requiredRoles', context.getHandler());
 
-    const request = context.switchToHttp().getRequest();
+    const request = this.getRequest(context);
 
     //헤더에서 베어러 토큰을 추출한다
     try {
@@ -75,4 +80,17 @@ export class LogtoTokenGuard implements CanActivate {
 
     return headers.authorization.slice(bearerTokenIdentifier.length + 1);
   };
+
+  private getRequest(context: ExecutionContext): any {
+    // Works for both REST and GraphQL
+    if (context.getType<'http' | 'graphql'>() === 'graphql') {
+      const gqlCtx = GqlExecutionContext.create(context);
+      // depends on what you return from GraphQLModule context: ({ req }) => ({ req })
+      return gqlCtx.getContext().req;
+    }
+
+    return context.switchToHttp().getRequest();
+  }
+
+
 }