fix: allow fetching rosters

Author: csuvajit

src/auth/auth.service.ts

@@ -53,7 +53,12 @@ export class AuthService {
       userId: user.userId,
       roles: user.roles,
       accessToken: this.createJwt(
-        { userId: user.userId, roles: user.roles, username: user.username },
+        {
+          userId: user.userId,
+          roles: user.roles,
+          username: user.username,
+          guildIds: user.guildIds,
+        },
         { expiresIn: '2h' },
       ),
     };
@@ -145,6 +150,7 @@ export class AuthService {
         userId: input.userId,
         roles: input.roles,
         username: dto.displayName,
+        guildIds: dto.guildIds,
       }),
     };
   }
@@ -227,15 +233,21 @@ export class AuthService {
   }
 
   private createJwt(
-    input: { userId: string; roles: UserRoles[]; username: string; remoteIp?: string },
+    input: {
+      userId: string;
+      roles: UserRoles[];
+      username: string;
+      remoteIp?: string;
+      guildIds?: string[];
+    },
     options?: JwtSignOptions,
   ) {
     const payload = {
       userId: input.userId,
       roles: input.roles,
       version: '1',
       jti: randomUUID(),
-      guildIds: [],
+      guildIds: input.guildIds || [],
       remoteIp: input.remoteIp,
       username: input.username.toLowerCase(),
     } satisfies JwtUserInput;

src/auth/dto/user-roles.dto.ts

@@ -12,6 +12,8 @@ export enum UserRoles {
   FETCH_LINKS = 'fetch:links',
   MANAGE_LINKS = 'manage:links',
 
+  FETCH_ROSTERS = 'fetch:rosters',
+
   MANAGE_ROSTERS = 'manage:rosters',
 
   MANAGE_REMINDERS = 'manage:reminders',

src/db/collections/api-users.entity.ts

@@ -9,5 +9,6 @@ export class ApiUsersEntity {
   username: string;
   createdAt: Date;
   updatedAt: Date;
+  guildIds: string[];
   deletedAt: Date | null;
 }

src/rosters/rosters.controller.ts

@@ -31,6 +31,7 @@ export class RostersController {
   constructor(private rostersService: RostersService) {}
 
   @Get('/:guildId/list')
+  @Roles([UserRoles.USER, UserRoles.FETCH_ROSTERS])
   getRosters(@Param('guildId') guildId: string): Promise<GetRostersDto> {
     return this.rostersService.getRosters(guildId);
   }