UNPKG

@takentrade/takentrade-libs

Version:
42 lines (41 loc) 1.86 kB
"use strict"; var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; Object.defineProperty(exports, "__esModule", { value: true }); exports.RolesGuard = void 0; const common_1 = require("@nestjs/common"); const roles_decorator_1 = require("../decorators/roles.decorator"); /** * Guard to enforce role-based access control using the Roles decorator. */ let RolesGuard = class RolesGuard { reflector; constructor(reflector) { this.reflector = reflector; } /** * Checks if the user has one of the required roles to access the route. * @param context Execution context containing the request. * @returns True if the user has a required role or no roles are specified, false otherwise. */ canActivate(context) { const requiredRoles = this.reflector.getAllAndOverride(roles_decorator_1.ROLES_KEY, [context.getHandler(), context.getClass()]); if (!requiredRoles || requiredRoles.length === 0) { return true; } const request = context.switchToHttp().getRequest(); const user = request.user; if (!user || !user.role) { return false; } return requiredRoles.includes(user.role); } }; exports.RolesGuard = RolesGuard; exports.RolesGuard = RolesGuard = __decorate([ (0, common_1.Injectable)() ], RolesGuard);