UNPKG

@takentrade/takentrade-libs

Version:
48 lines (47 loc) 1.94 kB
"use strict"; var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; Object.defineProperty(exports, "__esModule", { value: true }); exports.RolesGuard = void 0; const common_1 = require("@nestjs/common"); const roles_decorator_1 = require("../decorators/roles.decorator"); /** * Role-based authorization guard * Checks if the authenticated user has the required roles */ let RolesGuard = class RolesGuard { reflector; /** * Creates an instance of RolesGuard * @param reflector - Reflector service for metadata access */ constructor(reflector) { this.reflector = reflector; } /** * Checks if the user has the required roles * @param context - Execution context * @returns True if user has required roles, false otherwise */ canActivate(context) { const requiredRoles = this.reflector.getAllAndOverride(roles_decorator_1.ROLES_KEY, [context.getHandler(), context.getClass()]); if (!requiredRoles) { return true; } const request = context.switchToHttp().getRequest(); const user = request.user; if (!user) { return false; } const userRoles = user.roles || []; return requiredRoles.some((role) => userRoles.includes(role)); } }; exports.RolesGuard = RolesGuard; exports.RolesGuard = RolesGuard = __decorate([ (0, common_1.Injectable)() ], RolesGuard);