feat: jwt auth for maintenance

server/src/controllers/maintenance.controller.ts

@@ -1,21 +1,42 @@
 import { BadRequestException, Controller, Post, Res } from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
 import { ApiTags } from '@nestjs/swagger';
 import { Response } from 'express';
-import { MaintenanceModeResponseDto } from 'src/dtos/maintenance.dto';
+import { AuthDto } from 'src/dtos/auth.dto';
+import { MaintenanceAuthDto, MaintenanceModeResponseDto } from 'src/dtos/maintenance.dto';
 import { ImmichCookie, Permission } from 'src/enum';
-import { Authenticated } from 'src/middleware/auth.guard';
+import { Auth, Authenticated } from 'src/middleware/auth.guard';
 import { MaintenanceService } from 'src/services/maintenance.service';
 
 @ApiTags('Maintenance (admin)')
 @Controller('admin/maintenance')
 export class MaintenanceController {
-  constructor(private service: MaintenanceService) {}
+  constructor(
+    private service: MaintenanceService,
+    private jwtService: JwtService,
+  ) {}
 
   @Post('start')
   @Authenticated({ permission: Permission.Maintenance, admin: true })
-  async startMaintenance(@Res({ passthrough: true }) response: Response): Promise<MaintenanceModeResponseDto> {
-    await this.service.startMaintenance();
-    response.cookie(ImmichCookie.MaintenanceToken, 'my-token');
+  async startMaintenance(
+    @Auth() auth: AuthDto,
+    @Res({ passthrough: true }) response: Response,
+  ): Promise<MaintenanceModeResponseDto> {
+    const { token } = await this.service.startMaintenance();
+
+    const jwt = await this.jwtService.signAsync(
+      {
+        data: {
+          username: auth.user.name,
+        } as MaintenanceAuthDto,
+      },
+      {
+        secret: token,
+      },
+    );
+
+    response.cookie(ImmichCookie.MaintenanceToken, jwt);
+
     return { isMaintenanceMode: true };
   }