@experium/nest-bruteforce-guard/src/bruteforce-guard.interceptor.ts

Authorization protection from bruteforce

import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nestjs/common';
import { Observable } from 'rxjs';
import { catchError, tap } from 'rxjs/operators';
import { BruteforceGuardService } from './bruteforce-guard.service';

@Injectable()
export class BruteforceGuardInterceptor implements NestInterceptor {
  constructor(private readonly bruteforceGuardService: BruteforceGuardService) {}

  async intercept(context: ExecutionContext, next: CallHandler): Promise<Observable<any>> {
    await this.bruteforceGuardService.canLogin(context);

    return next.handle().pipe(
      catchError(async (err) => {
        await this.bruteforceGuardService.saveErrorAttempt(context, err);

        throw err;
      }),
      tap(async () => await this.bruteforceGuardService.saveSuccessAttempt(context)),
    );
  }
}