chore: first commit

src/modules/auth/guards/admin.guard.ts

@@ -0,0 +1,25 @@
+import { CanActivate, ExecutionContext, ForbiddenException, Injectable } from "@nestjs/common";
+import { Reflector } from "@nestjs/core";
+import { FastifyRequest } from "fastify";
+
+import { ADMIN_ROUTE } from "../../../common/decorators/admin.decorator";
+import { AuthMessage } from "../../../common/enums/message.enum";
+
+@Injectable()
+export class AdminRouteGuard implements CanActivate {
+  constructor(private reflector: Reflector) {}
+
+  canActivate(context: ExecutionContext): boolean {
+    const requiredAdmin = this.reflector.getAllAndOverride<boolean>(ADMIN_ROUTE, [context.getHandler(), context.getClass()]);
+    if (!requiredAdmin) return true;
+
+    const req = context.switchToHttp().getRequest<FastifyRequest>();
+    const user = req.user;
+
+    if (!user) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+    if (!user.role) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+    return true;
+  }
+}

src/modules/auth/guards/auth.guard.ts

@@ -0,0 +1,28 @@
+import { ExecutionContext, Injectable, UnauthorizedException } from "@nestjs/common";
+import { Reflector } from "@nestjs/core";
+import { AuthGuard } from "@nestjs/passport";
+import { Observable } from "rxjs";
+
+import { CONSOLE_JWT_STRATEGY_NAME, LOCAL_JWT_STRATEGY_NAME } from "../../../common/constants";
+import { SKIP_AUTH_KEY } from "../../../common/decorators/skip-auth.decorator";
+import { AuthMessage } from "../../../common/enums/message.enum";
+
+@Injectable()
+export class JwtAuthGuard extends AuthGuard([CONSOLE_JWT_STRATEGY_NAME, LOCAL_JWT_STRATEGY_NAME]) {
+  constructor(private reflector: Reflector) {
+    super();
+  }
+
+  canActivate(context: ExecutionContext): boolean | Promise<boolean> | Observable<boolean> {
+    const skipAuth = this.reflector.getAllAndOverride<boolean>(SKIP_AUTH_KEY, [context.getHandler(), context.getClass()]);
+
+    if (skipAuth) return true;
+
+    return super.canActivate(context);
+  }
+
+  handleRequest(err: unknown, user: any, _info: unknown) {
+    if (err || !user) throw new UnauthorizedException(AuthMessage.TOKEN_EXPIRED_OR_INVALID);
+    return user;
+  }
+}

src/modules/auth/guards/role.guard.ts

@@ -0,0 +1,27 @@
+// import { CanActivate, ExecutionContext, ForbiddenException, Injectable } from "@nestjs/common";
+// import { Reflector } from "@nestjs/core";
+// import { FastifyRequest } from "fastify";
+
+// import { ROLES_KEY } from "../../../common/decorators/roles.decorator";
+// import { AuthMessage } from "../../../common/enums/message.enum";
+// import { RoleEnum } from "../../users/enums/role.enum";
+
+// @Injectable()
+// export class RoleGuard implements CanActivate {
+//   constructor(private reflector: Reflector) {}
+
+//   canActivate(context: ExecutionContext): boolean {
+//     const requiredRole = this.reflector.getAllAndOverride<RoleEnum[]>(ROLES_KEY, [context.getHandler(), context.getClass()]);
+//     if (!requiredRole) return true;
+
+//     const req = context.switchToHttp().getRequest<FastifyRequest>();
+//     const user = req.user;
+
+//     if (!user) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+//     const hasRequiredRole = requiredRole.some((role) => user.roles.includes(role));
+//     if (!hasRequiredRole) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+//     return true;
+//   }
+// }