import { ExecutionContext, Injectable, NotFoundException, } from "@nestjs/common"; import { User } from "@prisma/client"; import { Request } from "express"; import { PrismaService } from "src/prisma/prisma.service"; import { JwtGuard } from "../../auth/guard/jwt.guard"; import { ConfigService } from "src/config/config.service"; @Injectable() export class ShareOwnerGuard extends JwtGuard { constructor( configService: ConfigService, private prisma: PrismaService, ) { super(configService); } async canActivate(context: ExecutionContext) { const request: Request = context.switchToHttp().getRequest(); const shareId = Object.prototype.hasOwnProperty.call( request.params, "shareId", ) ? request.params.shareId : request.params.id; const share = await this.prisma.share.findUnique({ where: { id: shareId }, include: { security: true }, }); if (!share) throw new NotFoundException("Share not found"); if (!share.creatorId) return true; if (!(await super.canActivate(context))) return false; return share.creatorId == (request.user as User).id; } }