kallesh/BE
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth fix

Browse Source
This commit is contained in:
Kallesh B S 2025-09-26 12:33:43 +05:30
parent b27fee6ece
commit 32341b002b
4 changed files with 19 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
src/auth/auth.service.ts
View File

@ -305,22 +305,22 @@ export class AuthService {
// throw new BadRequestException("Invalid username or password") // throw new BadRequestException("Invalid username or password")
// } // }
if (access_token && refresh_token && userSession.length > 0) { // if (access_token && refresh_token && userSession.length > 0) {
const getSub: any = jwt.decode(refresh_token, { complete: true }) // const getSub: any = jwt.decode(refresh_token, { complete: true })
const user: any = await this.getUserDetailsById(getSub?.payload.sub) // const user: any = await this.getUserDetailsById(getSub?.payload.sub)
if (user.email !== username) { // if (user.email !== username) {
throw new UnauthorizedException("Authentication failed") // throw new UnauthorizedException("Authentication failed")
} // }
let tokens = await this.getTokenFromRefreshToken(req); // let tokens = await this.getTokenFromRefreshToken(req);
const decoded = jwt.decode(access_token, { complete: true }); // const decoded = jwt.decode(access_token, { complete: true });
const email: any = (decoded && typeof decoded === 'object') ? (decoded as any).payload?.email : undefined; // const email: any = (decoded && typeof decoded === 'object') ? (decoded as any).payload?.email : undefined;
return { ...tokens, email, ApplicationName: ROLE } // return { ...tokens, email, ApplicationName: ROLE }
} // }
const response = await axios.post(this.TOKEN_URL, params, { const response = await axios.post(this.TOKEN_URL, params, {
headers: { 'Content-Type': 'application/x-www-form-urlencoded' }, headers: { 'Content-Type': 'application/x-www-form-urlencoded' },

2
src/guards/roles.guard.ts
View File

@ -37,7 +37,7 @@ export class RolesGuard implements CanActivate {
try { try {
const decoded: any = jwt.decode(token); const decoded: any = jwt.decode(token);
const roles: string[] = decoded?.resource_access?.['carnet-app']?.roles || []; const roles: string[] = decoded?.resource_access?.[process.env.CLIENT_ID || '']?.roles || [];
const hasRole = requiredRoles.some(role => roles.includes(role)); const hasRole = requiredRoles.some(role => roles.includes(role));
if (!hasRole) { if (!hasRole) {

7
src/main.ts
View File

@ -20,7 +20,12 @@ async function bootstrap() {
'http://localhost:5173', 'http://localhost:5173',
'https://policy.alphaomegainfosys.com', 'https://policy.alphaomegainfosys.com',
'https://sp.alphaomegainfosys.com', 'https://sp.alphaomegainfosys.com',
'https://client.alphaomegainfosys.com' 'https://policy-2.alphaomegainfosys.com',
'https://client-2.alphaomegainfosys.com',
'https://sp-2.alphaomegainfosys.com',
'https://policy-1.alphaomegainfosys.com',
'https://client-1.alphaomegainfosys.com',
'https://sp-1.alphaomegainfosys.com',
], ],
methods: 'GET,HEAD,PUT,PATCH,POST,DELETE', methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
preflightContinue: false, preflightContinue: false,

2
src/pg/manage-clients/manage-clients.controller.ts
View File

@ -57,7 +57,7 @@ export class ManageClientsController {
} }
@Post('CreateClientLocations') @Post('CreateClientLocations')
@Roles('pca', 'psa') @Roles('pca', 'psa', 'pua')
CreateClientLocation(@Body() body: CreateClientLocationsDTO) { CreateClientLocation(@Body() body: CreateClientLocationsDTO) {
return this.manageClientsService.CreateClientLocation(body); return this.manageClientsService.CreateClientLocation(body);
} }