@punks/backend-entity-manager 0.0.68 → 0.0.69

package/dist/cjs/index.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 var backendCore = require('@punks/backend-core');
 var common = require('@nestjs/common');
 var swagger = require('@nestjs/swagger');
+var core = require('@nestjs/core');
 var async_hooks = require('async_hooks');
 var bcrypt = require('bcrypt');
 var constants = require('@nestjs/common/constants');
@@ -13,7 +14,6 @@ var metadataScanner = require('@nestjs/core/metadata-scanner');
 var jwt = require('@nestjs/jwt');
 var eventEmitter = require('@nestjs/event-emitter');
 var typeorm = require('typeorm');
-var core = require('@nestjs/core');
 var clientSes = require('@aws-sdk/client-ses');
 var require$$2 = require('fs');
 var mail = require('@sendgrid/mail');
@@ -375,6 +375,59 @@ const AuthenticationEvents = {
     UserPasswordResetCompleted: `${AUTHENTICATION_EVENTS_NAMESPACE}:user.passwordResetCompleted`,
 };
 
+exports.AuthGuard = class AuthGuard {
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    canActivate(context) {
+        const isPublic = this.getIsPublic(context);
+        if (isPublic) {
+            return true;
+        }
+        const auth = this.getCurrentAuth(context);
+        const allowedRoles = this.getAllowedRoles(context);
+        if (allowedRoles) {
+            return this.isRoleMatching(allowedRoles, auth?.roles ?? []);
+        }
+        const isForAllAuthenticated = this.getIsForAllAuthenticated(context);
+        if (isForAllAuthenticated) {
+            return !!auth?.user;
+        }
+        return false;
+    }
+    isRoleMatching(allowedRoles, userRoles) {
+        return userRoles.some((role) => allowedRoles.includes(role.uid));
+    }
+    getIsForAllAuthenticated(context) {
+        return this.getMetadata(AuthenticationGuardsSymbols.Authenticated, context);
+    }
+    getIsPublic(context) {
+        return this.getMetadata(AuthenticationGuardsSymbols.Public, context);
+    }
+    getAllowedRoles(context) {
+        return this.getMetadata(AuthenticationGuardsSymbols.Roles, context);
+    }
+    getCurrentAuth(context) {
+        const request = context.switchToHttp()?.getRequest();
+        return request?.auth?.user
+            ? {
+                user: request.auth.user,
+                roles: request.auth.roles,
+            }
+            : undefined;
+    }
+    getMetadata(symbol, context) {
+        return this.reflector.getAllAndOverride(symbol, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+    }
+};
+exports.AuthGuard = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [core.Reflector])
+], exports.AuthGuard);
+
 const asyncLocalStorage = new async_hooks.AsyncLocalStorage();
 
 exports.AppSessionService = class AppSessionService {
@@ -20059,6 +20112,7 @@ const ModuleData$2 = {
     providers: [
         AuthenticationServicesResolver,
         AuthenticationInitializer,
+        exports.AuthGuard,
         ...Services$2,
         ...UserHandlers,
         ...AuthenticationProviders,