@zigatech/keycloak-auth/dist/cjs/auth/authGuard.js

Keycloak authorization library for NestJS. Works out of the box.

"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.AuthGuard = void 0;
const common_1 = require("@nestjs/common");
const core_1 = require("@nestjs/core");
const public_js_1 = require("../decorator/public.js");
const keycloak_auth_js_1 = require("../constant/keycloak.auth.js");
const auth_js_1 = require("./auth.js");
let AuthGuard = class AuthGuard {
    constructor(reflector) {
        Object.defineProperty(this, "reflector", {
            enumerable: true,
            configurable: true,
            writable: true,
            value: reflector
        });
    }
    canActivate(context) {
        return __awaiter(this, void 0, void 0, function* () {
            const isPublic = this.reflector.getAllAndOverride(public_js_1.IS_PUBLIC_KEY, [context.getHandler(), context.getClass()]);
            if (isPublic) {
                common_1.Logger.debug("Public route. Authentication not required.", keycloak_auth_js_1.KeycloakAuth.NAME);
                return true;
            }
            const req = context.switchToHttp().getRequest();
            const auth = new auth_js_1.Auth(req);
            try {
                const principal = yield auth.validate();
                req.principal = principal;
                req.roles = principal.getRoles();
            }
            catch (err) {
                common_1.Logger.error(err.message, keycloak_auth_js_1.KeycloakAuth.NAME);
                if (err instanceof common_1.UnauthorizedException) {
                    common_1.Logger.debug("Unauthorized Exception!");
                    throw new common_1.UnauthorizedException(err.message);
                }
                throw new common_1.ForbiddenException(err.message);
            }
            return true;
        });
    }
};
exports.AuthGuard = AuthGuard;
exports.AuthGuard = AuthGuard = __decorate([
    (0, common_1.Injectable)(),
    __metadata("design:paramtypes", [core_1.Reflector])
], AuthGuard);