@punks/backend-entity-manager 0.0.107 → 0.0.109

package/dist/cjs/index.js

@@ -2402,24 +2402,53 @@ const AuthenticationEvents = {
     UserPasswordResetCompleted: `${AUTHENTICATION_EVENTS_NAMESPACE}:user.passwordResetCompleted`,
 };
 
-exports.AuthGuard = class AuthGuard {
+var AuthGuard_1;
+exports.AuthGuard = AuthGuard_1 = class AuthGuard {
     constructor(reflector) {
         this.reflector = reflector;
+        this.logger = backendCore.Log.getLogger(AuthGuard_1.name);
     }
     canActivate(context) {
         const isPublic = this.getIsPublic(context);
         if (isPublic) {
+            this.logger.debug(`Authorized:true -> public route`, this.getContextInfo({
+                context,
+            }));
             return true;
         }
         const auth = this.getCurrentAuth(context);
         const allowedRoles = this.getAllowedRoles(context);
         if (allowedRoles) {
-            return this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            const isAllowed = this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            this.logger.debug(`Authorized:${isAllowed} -> authorization guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+                allowedRoles,
+            });
+            return isAllowed;
         }
         const isForAllAuthenticated = this.getIsForAllAuthenticated(context);
         if (isForAllAuthenticated) {
-            return !!auth?.user;
+            const isAuthenticated = !!auth?.user;
+            this.logger.debug(`Authorized:${isAuthenticated} -> authentication guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+            });
+            return isAuthenticated;
         }
+        this.logger.debug(`Authorized:false -> auth guard`, {
+            ...this.getContextInfo({
+                context,
+                roles: auth?.roles,
+                user: auth?.user,
+            }),
+        });
         return false;
     }
     isRoleMatching(allowedRoles, userRoles) {
@@ -2449,8 +2478,28 @@ exports.AuthGuard = class AuthGuard {
             context.getClass(),
         ]);
     }
+    getContextInfo({ context, user, roles, }) {
+        return {
+            request: {
+                path: context.switchToHttp()?.getRequest()?.path,
+                method: context.switchToHttp()?.getRequest()?.method,
+            },
+            ...(user
+                ? {
+                    id: user.id,
+                    userName: user.userName,
+                    email: user.email,
+                    roles: roles?.map((role) => ({
+                        id: role.id,
+                        name: role.name,
+                        uid: role.uid,
+                    })),
+                }
+                : {}),
+        };
+    }
 };
-exports.AuthGuard = __decorate([
+exports.AuthGuard = AuthGuard_1 = __decorate([
     common.Injectable(),
     __metadata("design:paramtypes", [core.Reflector])
 ], exports.AuthGuard);