fix tiny permission bug

This commit is contained in:
rubikscraft
2022-03-08 10:59:22 +01:00
parent c60bfb88bc
commit 154bea5bc6
4 changed files with 11 additions and 4 deletions

View File

@@ -1,6 +1,8 @@
import {
CanActivate,
ExecutionContext, Injectable, Logger
ExecutionContext,
Injectable,
Logger
} from '@nestjs/common';
import { plainToClass } from 'class-transformer';
import { validate } from 'class-validator';
@@ -13,8 +15,12 @@ export class AdminGuard implements CanActivate {
async canActivate(context: ExecutionContext): Promise<boolean> {
const request = context.switchToHttp().getRequest();
if (!request.user) {
return false;
}
const user = plainToClass(EUserBackend, request.user);
const errors = await validate(user, {forbidUnknownValues: true});
const errors = await validate(user, { forbidUnknownValues: true });
if (errors.length > 0) {
this.logger.warn(errors);
return false;

View File

@@ -4,6 +4,6 @@ import { PrefController } from './pref.controller';
@Module({
imports: [SysPreferenceModule],
controllers: [PrefController]
controllers: [PrefController],
})
export class PrefModule {}

View File

@@ -12,9 +12,10 @@ import {
import { isHash } from 'class-validator';
import { FastifyReply, FastifyRequest } from 'fastify';
import { HasFailed } from 'picsur-shared/dist/types';
import { MultiPart } from '../../decorators/decorator';
import { MultiPart } from '../../decorators/multipart';
import { ImageManagerService } from '../../managers/imagemanager/imagemanager.service';
import { ImageUploadDto } from '../../models/dto/imageroute.dto';
@Controller('i')
export class ImageController {
constructor(private readonly imagesService: ImageManagerService) {}