chore: first

src/modules/auth/guards/role.guard.ts

@@ -0,0 +1,27 @@
+// import { CanActivate, ExecutionContext, ForbiddenException, Injectable } from "@nestjs/common";
+// import { Reflector } from "@nestjs/core";
+// import { FastifyRequest } from "fastify";
+
+// import { ROLES_KEY } from "../../../common/decorators/roles.decorator";
+// import { AuthMessage } from "../../../common/enums/message.enum";
+// import { RoleEnum } from "../../users/enums/role.enum";
+
+// @Injectable()
+// export class RoleGuard implements CanActivate {
+//   constructor(private reflector: Reflector) {}
+
+//   canActivate(context: ExecutionContext): boolean {
+//     const requiredRole = this.reflector.getAllAndOverride<RoleEnum[]>(ROLES_KEY, [context.getHandler(), context.getClass()]);
+//     if (!requiredRole) return true;
+
+//     const req = context.switchToHttp().getRequest<FastifyRequest>();
+//     const user = req.user;
+
+//     if (!user) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+//     const hasRequiredRole = requiredRole.some((role) => user.roles.includes(role));
+//     if (!hasRequiredRole) throw new ForbiddenException(AuthMessage.UNAUTHORIZED_ACCESS);
+
+//     return true;
+//   }
+// }