门店账户多账号

server/dukang-api/src/common/guards/shop-store.guard.ts

@@ -0,0 +1,15 @@
+import { CanActivate, ExecutionContext, ForbiddenException, Injectable } from '@nestjs/common';
+import type { AuthUser } from './jwt-auth.guard';
+
+/** Shop business APIs require JWT claim storeId (after select-store). */
+@Injectable()
+export class ShopStoreGuard implements CanActivate {
+  canActivate(context: ExecutionContext): boolean {
+    const req = context.switchToHttp().getRequest();
+    const user = req.user as AuthUser | undefined;
+    if (!user?.storeId) {
+      throw new ForbiddenException('请先选择门店');
+    }
+    return true;
+  }
+}