@punks/backend-entity-manager 0.0.108 → 0.0.110

package/dist/cjs/index.js

@@ -2402,25 +2402,55 @@ const AuthenticationEvents = {
     UserPasswordResetCompleted: `${AUTHENTICATION_EVENTS_NAMESPACE}:user.passwordResetCompleted`,
 };
 
-exports.AuthGuard = class AuthGuard {
+var AuthGuard_1;
+exports.AuthGuard = AuthGuard_1 = class AuthGuard {
     constructor(reflector) {
         this.reflector = reflector;
+        this.logger = backendCore.Log.getLogger(AuthGuard_1.name);
     }
     canActivate(context) {
         const isPublic = this.getIsPublic(context);
         if (isPublic) {
+            this.logger.debug(`Authorized:true -> public route`, this.getContextInfo({
+                context,
+            }));
             return true;
         }
         const auth = this.getCurrentAuth(context);
         const allowedRoles = this.getAllowedRoles(context);
         if (allowedRoles) {
-            return this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            const isAllowed = this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+            this.logger.debug(`Authorized:${isAllowed} -> authorization guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+                allowedRoles,
+            });
+            return isAllowed;
         }
         const isForAllAuthenticated = this.getIsForAllAuthenticated(context);
         if (isForAllAuthenticated) {
-            return !!auth?.user;
-        }
-        return false;
+            const isAuthenticated = !!auth?.user;
+            this.logger.debug(`Authorized:${isAuthenticated} -> authentication guard`, {
+                ...this.getContextInfo({
+                    context,
+                    roles: auth?.roles,
+                    user: auth?.user,
+                }),
+            });
+            return isAuthenticated;
+        }
+        const isAuthenticated = !!auth?.user;
+        this.logger.debug(`Authorized:${isAuthenticated} -> auth guard`, {
+            ...this.getContextInfo({
+                context,
+                roles: auth?.roles,
+                user: auth?.user,
+            }),
+        });
+        return isAuthenticated;
     }
     isRoleMatching(allowedRoles, userRoles) {
         return userRoles.some((role) => allowedRoles.includes(role.uid));
@@ -2449,8 +2479,30 @@ exports.AuthGuard = class AuthGuard {
             context.getClass(),
         ]);
     }
+    getContextInfo({ context, user, roles, }) {
+        return {
+            request: {
+                path: context.switchToHttp()?.getRequest()?.path,
+                method: context.switchToHttp()?.getRequest()?.method,
+            },
+            ...(user
+                ? {
+                    user: {
+                        id: user.id,
+                        userName: user.userName,
+                        email: user.email,
+                        roles: roles?.map((role) => ({
+                            id: role.id,
+                            name: role.name,
+                            uid: role.uid,
+                        })),
+                    },
+                }
+                : {}),
+        };
+    }
 };
-exports.AuthGuard = __decorate([
+exports.AuthGuard = AuthGuard_1 = __decorate([
     common.Injectable(),
     __metadata("design:paramtypes", [core.Reflector])
 ], exports.AuthGuard);