hqweb端

2026-07-01 08:27:26 +08:00
parent 9f4577d3d8
commit 25f0d8e97b
56 changed files with 5298 additions and 2 deletions
@@ -0,0 +1,26 @@
+import {
+  CanActivate,
+  ExecutionContext,
+  Injectable,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { ClientApp } from '@dukang/shared-types';
+import { JwtAuthGuard } from './jwt-auth.guard';
+
+@Injectable()
+export class HqAuthGuard extends JwtAuthGuard implements CanActivate {
+  canActivate(context: ExecutionContext): boolean {
+    const ok = super.canActivate(context);
+    if (!ok) return false;
+
+    const req = context.switchToHttp().getRequest();
+    const clientApp = req.headers['x-client-app'] as ClientApp;
+    if (clientApp !== ClientApp.HQ_WEB) {
+      throw new UnauthorizedException('Invalid client app for admin');
+    }
+    if (req.user?.actorType !== 'HQ') {
+      throw new UnauthorizedException('HQ access required');
+    }
+    return true;
+  }
+}