helpy4/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich synced 2025-11-14 17:36:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

refactor: auth service (#11811)

Browse source
This commit is contained in:
Jason Rasmussen 2024-08-15 09:14:23 -04:00 • committed by GitHub
parent b288241a5c
commit a4506758aa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 352 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

18
server/src/middleware/auth.guard.ts
View file

@ -89,20 +89,14 @@ export class AuthGuard implements CanActivate {
return true;
}
const { admin: adminRoute, sharedLink: sharedLinkRoute } = { sharedLink: false, admin: false, ...options };
const request = context.switchToHttp().getRequest<AuthRequest>();
const authDto = await this.authService.validate(request.headers, request.query as Record<string, string>);
if (authDto.sharedLink && !(options as SharedLinkRoute).sharedLink) {
this.logger.warn(`Denied access to non-shared route: ${request.path}`);
return false;
}
if (!authDto.user.isAdmin && (options as AdminRoute).admin) {
this.logger.warn(`Denied access to admin only route: ${request.path}`);
return false;
}
request.user = authDto;
request.user = await this.authService.authenticate({
headers: request.headers,
queryParams: request.query as Record<string, string>,
metadata: { adminRoute, sharedLinkRoute, uri: request.path },
});
return true;
}