34 lines
1.1 KiB
TypeScript
34 lines
1.1 KiB
TypeScript
// auth.guard.ts
|
|
import { Injectable, CanActivate, ExecutionContext, UnauthorizedException } from '@nestjs/common';
|
|
import { Request } from 'express';
|
|
import { UserSessionService } from 'src/auth/service/user-session.service';
|
|
|
|
@Injectable()
|
|
export class AuthGuard implements CanActivate {
|
|
constructor(
|
|
private userSessionService: UserSessionService,
|
|
) { }
|
|
|
|
async canActivate(context: ExecutionContext): Promise<boolean> {
|
|
const request = context.switchToHttp().getRequest<Request>();
|
|
|
|
// 从 Cookie 读取 session
|
|
const sessionId = request.cookies?.['session'];
|
|
if (!sessionId) {
|
|
throw new UnauthorizedException('登陆凭证无效，请重新登陆');
|
|
}
|
|
|
|
// 验证 session
|
|
const session = await this.userSessionService.getSession(sessionId);
|
|
if (!session) {
|
|
throw new UnauthorizedException('登陆凭证无效，请重新登陆');
|
|
}
|
|
|
|
const { userId } = session;
|
|
request.user = {
|
|
sessionId,
|
|
userId,
|
|
};
|
|
return true;
|
|
}
|
|
} |