@opentiny/tiny-toolkit-pro/template/nestJs/src/auth/auth.guard.ts

TinyPro Vue：开箱即用、前后端分离的 Vue 后台管理模板

import {
  CanActivate,
  ExecutionContext,
  HttpException,
  HttpStatus,
  Injectable,
} from '@nestjs/common';
import { Reflector } from '@nestjs/core';
import { JwtService } from '@nestjs/jwt';
import { Request } from 'express';
import { AuthService } from './auth.service';
import { I18nContext } from 'nestjs-i18n';
import { I18nTranslations } from '../.generate/i18n.generated';

@Injectable()
export class AuthGuard implements CanActivate {
  constructor(
    private readonly jwt: JwtService,
    private readonly reflector: Reflector,
    private readonly authService: AuthService
  ) {}
  async canActivate(ctx: ExecutionContext): Promise<boolean> {
    const i18n = I18nContext.current<I18nTranslations>();
    const isPublic = this.reflector.getAllAndOverride('isPublic', [
      ctx.getHandler(),
      ctx.getClass(),
    ]);
    if (isPublic) {
      return true;
    }
    const req = ctx.switchToHttp().getRequest();
    const token = this.extractTokenFromHeader(req);
    if (!token) {
      throw new HttpException(
        i18n.t('exception.common.tokenError', {
          lang: I18nContext.current().lang,
        }),
        HttpStatus.UNAUTHORIZED
      );
    }
    try {
      await this.jwt.verify(token);
      const payload = await this.jwt.decode(token);
      req['user'] = payload;
      const cacheToken = await this.authService.getToken(payload.email);
      if (!cacheToken) {
        throw new HttpException(
          i18n.t('exception.common.tokenExpire', {
            lang: I18nContext.current().lang,
          }),
          HttpStatus.UNAUTHORIZED
        );
      }
      if (cacheToken !== token) {
        throw new HttpException(
          i18n.t('exception.common.tokenError', {
            lang: I18nContext.current().lang,
          }),
          HttpStatus.UNAUTHORIZED
        );
      }
      return true;
    } catch (err) {
      throw new HttpException(
        i18n.t('exception.common.tokenExpire', {
          lang: I18nContext.current().lang,
        }),
        HttpStatus.UNAUTHORIZED
      );
    }
  }
  private extractTokenFromHeader(request: Request): string | undefined {
    const [type, token] = request.headers.authorization?.split(' ') ?? [];
    return type === 'Bearer' ? token : undefined;
  }
}