ahasani
dee96b6e91
- Created response DTOs for ConfigService, AppService, AuthService, CatalogsService, AccountsService, BusinessActivityComplexesService, ComplexPosesService, SalesInvoicesService, BusinessActivitiesService, ConsumerBusinessActivityGoodsService, and others. - Implemented Create, FindAll, FindOne, and Update response types for services in consumer, partners, and POS modules. - Added request DTOs for creating and updating goods in the consumer business activities module. - Introduced filtering DTO for partner licenses. - Enhanced response mapping for partner license activations.
50 lines
1.1 KiB
TypeScript
50 lines
1.1 KiB
TypeScript
// src/common/guards/permissions.guard.ts
|
|
import { ITokenPayload } from '@/modules/auth/auth.utils'
|
|
import { PrismaService } from '@/prisma/prisma.service'
|
|
import {
|
|
ExecutionContext,
|
|
ForbiddenException,
|
|
Injectable,
|
|
UnauthorizedException,
|
|
} from '@nestjs/common'
|
|
import { Request as ExpressRequest } from 'express'
|
|
|
|
@Injectable()
|
|
export class PartnerGuard {
|
|
constructor(private prisma: PrismaService) {}
|
|
|
|
async canActivate(
|
|
tokenPayload: ITokenPayload,
|
|
context: ExecutionContext,
|
|
): Promise<boolean> {
|
|
if (!tokenPayload || tokenPayload.type !== 'PARTNER') {
|
|
throw new UnauthorizedException()
|
|
}
|
|
|
|
const partner = await this.prisma.partner.findFirst({
|
|
where: {
|
|
accounts: {
|
|
some: {
|
|
id: tokenPayload.account_id,
|
|
},
|
|
},
|
|
},
|
|
select: {
|
|
accounts: {
|
|
select: {
|
|
role: true,
|
|
},
|
|
},
|
|
},
|
|
})
|
|
|
|
if (!partner) {
|
|
throw new ForbiddenException('شما دسترسی لازم را ندارید.')
|
|
}
|
|
|
|
const req = context.switchToHttp().getRequest<ExpressRequest>()
|
|
|
|
return true
|
|
}
|
|
}
|