wip

Author: fagundesjg

src/guards/distribution-center.guard.ts

@@ -0,0 +1,23 @@
+import { ExecutionContext, HttpException, Injectable } from '@nestjs/common';
+import { AuthGuard } from '@nestjs/passport';
+import { AccessLevel } from '@prisma/client';
+
+import { canActivate } from './utils';
+
+@Injectable()
+export class DistributionCenterGuard extends AuthGuard('jwt') {
+  constructor() {
+    super();
+  }
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    await super.canActivate(context);
+    const ok = await canActivate(context, [
+      AccessLevel.Staff,
+      AccessLevel.DistributionCenter,
+    ]);
+    if (ok) return true;
+
+    throw new HttpException('Acesso não autorizado', 401);
+  }
+}

src/shelter-supply/shelter-supply.controller.ts

@@ -7,11 +7,13 @@ import {
   Param,
   Post,
   Put,
+  UseGuards,
 } from '@nestjs/common';
 import { ApiTags } from '@nestjs/swagger';
 
 import { ShelterSupplyService } from './shelter-supply.service';
 import { ServerResponse } from '../utils';
+import { DistributionCenterGuard } from '@/guards/distribution-center.guard';
 
 @ApiTags('Suprimento de abrigos')
 @Controller('shelter/supplies')
@@ -69,6 +71,7 @@ export class ShelterSupplyController {
   }
 
   @Put(':shelterId/supplies/many')
+  @UseGuards(DistributionCenterGuard)
   async updateMany(@Body() body, @Param('shelterId') shelterId: string) {
     try {
       const data = await this.shelterSupplyService.updateMany({