45 lines
1.0 KiB
TypeScript
45 lines
1.0 KiB
TypeScript
|
import { Injectable } from '@nestjs/common';
|
||
|
|
import { ConfigService } from '@nestjs/config';
|
||
|
|
import { PassportStrategy } from '@nestjs/passport';
|
||
|
|
import { ExtractJwt, Strategy } from 'passport-jwt';
|
||
|
|
import { PrismaService } from '../prisma/prisma.service';
|
||
|
|
|
||
|
|
export type JwtPayload = {
|
||
|
|
sub: string;
|
||
|
|
email: string;
|
||
|
|
role: string;
|
||
|
|
};
|
||
|
|
|
||
|
|
@Injectable()
|
||
|
|
export class JwtStrategy extends PassportStrategy(Strategy) {
|
||
|
|
constructor(
|
||
|
|
config: ConfigService,
|
||
|
|
private readonly prisma: PrismaService,
|
||
|
|
) {
|
||
|
|
super({
|
||
|
|
jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
|
||
|
|
ignoreExpiration: false,
|
||
|
|
secretOrKey: config.get<string>('JWT_SECRET', 'dev-secret'),
|
||
|
|
});
|
||
|
|
}
|
||
|
|
|
||
|
|
async validate(payload: JwtPayload) {
|
||
|
|
const user = await this.prisma.user.findUnique({
|
||
|
|
where: { id: payload.sub },
|
||
|
|
select: {
|
||
|
|
id: true,
|
||
|
|
email: true,
|
||
|
|
name: true,
|
||
|
|
role: true,
|
||
|
|
isActive: true,
|
||
|
|
},
|
||
|
|
});
|
||
|
|
|
||
|
|
if (!user || !user.isActive) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
return user;
|
||
|
|
}
|
||
|
|
}
|