src/auth/auth.controller.ts - main - coffe/api

src/auth/auth.controller.ts
104 строки3 KB
vwency
init
08 май 2026, 01:38
08 май 2026, 01:3847ccfb3
import {
  Body,
  Controller,
  ForbiddenException,
  Get,
  Headers,
  HttpCode,
  HttpStatus,
  Post,
  UseGuards,
} from '@nestjs/common'
import {
  ApiBearerAuth,
  ApiOperation,
  ApiResponse,
  ApiTags,
} from '@nestjs/swagger'

import { AuthService } from './auth.service'
import { AuthDto, LoginDto } from './dto'
import { AtGuard, RtGuard } from './guards'
import { GetCurrentUser, GetCurrentUserId, Public } from 'src/common/decorators'
import { Tokens } from './types'

@ApiTags('Authentication')
@Controller('auth')
export class AuthController {
  constructor(private authService: AuthService) {}

  @Public()
  @Post('register')
  @HttpCode(HttpStatus.CREATED)
  @ApiOperation({ summary: 'User registration' })
  @ApiResponse({ status: 201, description: 'User successfully registered' })
  @ApiResponse({ status: 403, description: 'Credentials already taken' })
  async signup(@Body() dto: AuthDto): Promise<Tokens> {
    return this.authService.signupLocal(dto)
  }

  @Public()
  @Post('login')
  @HttpCode(HttpStatus.OK)
  @ApiOperation({ summary: 'User login' })
  @ApiResponse({ status: 200, description: 'User successfully logged in' })
  @ApiResponse({ status: 403, description: 'Access Denied' })
  async login(@Body() dto: LoginDto): Promise<Tokens> {
    return this.authService.login(dto)
  }

  @ApiBearerAuth()
  @Post('logout')
  @UseGuards(AtGuard)
  @HttpCode(HttpStatus.OK)
  @ApiOperation({ summary: 'User logout' })
  @ApiResponse({ status: 200, description: 'User successfully logged out' })
  async logout(@GetCurrentUserId() userId: string): Promise<boolean> {
    return this.authService.logout(userId)
  }

  @Public()
  @UseGuards(RtGuard)
  @Post('refresh')
  @HttpCode(HttpStatus.OK)
  @ApiOperation({ summary: 'Refresh tokens' })
  @ApiResponse({ status: 200, description: 'Tokens successfully refreshed' })
  @ApiResponse({ status: 403, description: 'Access Denied' })
  async refreshTokens(
    @Body('refreshToken') refreshToken: string,
  ): Promise<Tokens> {
    if (!refreshToken) {
      throw new ForbiddenException('Refresh token is required')
    }
    return this.authService.refreshTokens(refreshToken)
  }

  @ApiBearerAuth()
  @Get('me')
  @UseGuards(AtGuard)
  @HttpCode(HttpStatus.OK)
  @ApiOperation({ summary: 'Get current user info' })
  @ApiResponse({ status: 200, description: 'Returns current user data' })
  async getCurrentUser(@GetCurrentUser() user: any) {
    return user
  }

  @Post('validate')
  @UseGuards(AtGuard)
  @HttpCode(HttpStatus.OK)
  @ApiOperation({ summary: 'Validate access token' })
  async validateToken(
    @GetCurrentUserId() userId: string,
    @Headers('authorization') authHeader: string,
  ): Promise<{ valid: boolean }> {
    const accessToken = authHeader?.replace('Bearer ', '')
    if (!accessToken) {
      throw new ForbiddenException('No access token provided')
    }
    const isValid = await this.authService.validateAccessToken(
      userId,
      accessToken,
    )
    return { valid: isValid }
  }
}