guards

src/modules/users/common/guards/users.guard.ts

@@ -0,0 +1,34 @@
+import { JwtPayload, verify } from "jsonwebtoken";
+import { Request } from "express";
+import { HttpError } from "@lib/error-handling/http-error";
+import { config } from "@configs/config";
+import { IJwtLoginPayload } from "@common/interfaces/jwt-payload.interface";
+
+export const UsersGuardMiddleware =
+  () => (req: Request, res, next) => {
+    // get token from cookie
+    const token = req.headers.authorization?.split(" ")[1];
+    let payload: IJwtLoginPayload;
+
+    // validate token
+    if (!token) {
+      throw new HttpError(401, "Unauthorized");
+    }
+
+    try {
+      payload = verify(token, config.jwt.secret);
+    } catch (err) {
+      throw new HttpError(401, "Unauthorized");
+    }
+
+    if (payload.type !== "user") {
+      throw new HttpError(401, "Unauthorized");
+    }
+
+
+    // inject payload in request
+    (req as unknown as { jwtPayload: JwtPayload }).jwtPayload = payload;
+
+    // go on
+    next();
+  };

src/modules/users/exercises/controllers/exercises.controller.ts

@@ -8,9 +8,12 @@ import { BaseController } from "@lib/controllers/controller.base";
 import { Prefix } from "@lib/decorators/prefix.decorator";
 import { serialize } from "@helpers/serialize";
 import { ExerciseSerialization } from "@common/serializers/exercise.serializtion";
+import { ControllerMiddleware } from "@lib/decorators/controller-middleware.decorator";
+import { UsersGuardMiddleware } from "modules/users/common/guards/users.guard";
 
 
 @Prefix("/users/exercises")
+@ControllerMiddleware(UsersGuardMiddleware())
 export class ExerciseController extends BaseController {
   private exercisesService = new ExerciseService();
 

src/modules/users/workouts/controllers/workouts.controller.ts

@@ -8,8 +8,11 @@ import { BaseController } from "@lib/controllers/controller.base";
 import { Prefix } from "@lib/decorators/prefix.decorator";
 import { serialize } from "@helpers/serialize";
 import { WorkoutSerialization } from "@common/serializers/workout.serializtion";
+import { ControllerMiddleware } from "@lib/decorators/controller-middleware.decorator";
+import { UsersGuardMiddleware } from "modules/users/common/guards/users.guard";
 
 @Prefix("/users/workouts")
+@ControllerMiddleware(UsersGuardMiddleware())
 export class WorkoutController extends BaseController {
   private workoutsService = new WorkoutService();