feat: 优化项目目录结构

apps/backend/src/common/decorators/role.decorator.ts

@@ -0,0 +1,4 @@
+import { SetMetadata } from '@nestjs/common';
+import { Role } from 'src/auth/role.enum';
+
+export const Roles = (...roles: Role[]) => SetMetadata('roles', roles);

apps/backend/src/common/guard/roles.guard.ts

@@ -0,0 +1,37 @@
+import {
+  BadRequestException,
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { Role } from 'src/auth/role.enum';
+import { User } from 'src/user/entities/user.entity';
+
+@Injectable()
+export class RolesGuard implements CanActivate {
+  constructor(private reflector: Reflector) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const requiredRoles = this.reflector.getAllAndOverride<Role[] | undefined>(
+      'roles',
+      [context.getHandler(), context.getClass()],
+    );
+
+    if (!requiredRoles) return true;
+
+    const request = context.switchToHttp().getRequest();
+    const user = request.user as User | void;
+
+    if (!user) {
+      throw new BadRequestException('服务器内部错误');
+    }
+
+    if (!requiredRoles.some((role) => user.roles.includes(role))) {
+      throw new ForbiddenException('权限不足');
+    }
+
+    return true;
+  }
+}

apps/backend/src/common/interceptors/response.interceptor.ts

@@ -0,0 +1,24 @@
+import {
+  CallHandler,
+  ExecutionContext,
+  Injectable,
+  NestInterceptor,
+} from '@nestjs/common';
+import { Observable } from 'rxjs';
+import { map } from 'rxjs/operators';
+
+@Injectable()
+export class ResponseInterceptor implements NestInterceptor {
+  intercept(
+    context: ExecutionContext,
+    next: CallHandler<any>,
+  ): Observable<any> | Promise<Observable<any>> {
+    return next.handle().pipe(
+      map((data) => ({
+        statusCode: 200,
+        message: '请求成功',
+        data,
+      })),
+    );
+  }
+}