Spaces:
Runtime error
Runtime error
File size: 3,026 Bytes
d44ff09 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 | import {
Controller,
Post,
Body,
Res,
Req,
HttpCode,
UseGuards,
UsePipes,
ValidationPipe,
} from '@nestjs/common';
import { Response, Request } from 'express';
import { ConfigService } from '@nestjs/config';
import { AuthService } from './auth.service';
import { RegisterDto, LoginDto, ActivateLicenseDto } from './dto';
import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard';
import { CurrentUser, AuthenticatedUser } from '../../common/decorators/current-user.decorator';
const REFRESH_COOKIE = 'alk_refresh';
@Controller('auth')
export class AuthController {
constructor(
private readonly auth: AuthService,
private readonly config: ConfigService,
) {}
private setRefreshCookie(res: Response, token: string) {
const isProd = this.config.get<string>('NODE_ENV') === 'production';
res.cookie(REFRESH_COOKIE, token, {
httpOnly: true,
secure: isProd, // Section 6.4: Secure in prod; relaxed only for local HTTP dev
sameSite: 'strict',
// Path must match the API prefix so the browser sends the cookie on
// /api/auth/refresh and /api/auth/logout (global prefix is 'api').
path: '/api/auth',
maxAge: 7 * 24 * 60 * 60 * 1000,
});
}
private clearRefreshCookie(res: Response) {
res.clearCookie(REFRESH_COOKIE, { path: '/api/auth' });
}
@Post('register')
@UsePipes(new ValidationPipe({ whitelist: true, transform: true }))
async register(@Body() dto: RegisterDto, @Res({ passthrough: true }) res: Response) {
const result = await this.auth.register(dto.email, dto.password);
this.setRefreshCookie(res, result.refreshToken);
return { user_id: result.user.id, access_token: result.accessToken };
}
@Post('login')
@HttpCode(200)
@UsePipes(new ValidationPipe({ whitelist: true, transform: true }))
async login(@Body() dto: LoginDto, @Res({ passthrough: true }) res: Response) {
const result = await this.auth.login(dto.email, dto.password);
this.setRefreshCookie(res, result.refreshToken);
return {
user_id: result.user.id,
access_token: result.accessToken,
license_status: result.licenseStatus,
};
}
@Post('refresh')
@HttpCode(200)
async refresh(@Req() req: Request, @Res({ passthrough: true }) res: Response) {
const token = req.cookies?.[REFRESH_COOKIE];
const result = await this.auth.refresh(token);
return { access_token: result.accessToken };
}
@Post('logout')
@HttpCode(204)
async logout(@Req() req: Request, @Res({ passthrough: true }) res: Response) {
const token = req.cookies?.[REFRESH_COOKIE];
await this.auth.logout(token);
this.clearRefreshCookie(res);
res.status(204);
return;
}
@Post('activate-license')
@UseGuards(JwtAuthGuard)
@UsePipes(new ValidationPipe({ whitelist: true, transform: true }))
async activateLicense(
@Body() dto: ActivateLicenseDto,
@CurrentUser() user: AuthenticatedUser,
) {
return await this.auth.activateLicense(user.id, dto.license_key);
}
}
|