Transfer repository from Gitlab

server/src/modules/immich-jwt/guards/jwt-auth.guard.ts

@@ -0,0 +1,5 @@
+import { Injectable } from '@nestjs/common';
+import { AuthGuard } from '@nestjs/passport';
+
+@Injectable()
+export class JwtAuthGuard extends AuthGuard('jwt') {}

server/src/modules/immich-jwt/immich-jwt.module.ts

@@ -0,0 +1,14 @@
+import { Module } from '@nestjs/common';
+import { ImmichJwtService } from './immich-jwt.service';
+import { JwtModule } from '@nestjs/jwt';
+import { jwtConfig } from '../../config/jwt.config';
+import { JwtStrategy } from './strategies/jwt.strategy';
+import { TypeOrmModule } from '@nestjs/typeorm';
+import { UserEntity } from '../../api-v1/user/entities/user.entity';
+
+@Module({
+  imports: [JwtModule.register(jwtConfig), TypeOrmModule.forFeature([UserEntity])],
+  providers: [ImmichJwtService, JwtStrategy],
+  exports: [ImmichJwtService],
+})
+export class ImmichJwtModule {}

server/src/modules/immich-jwt/immich-jwt.service.ts

@@ -0,0 +1,14 @@
+import { Injectable } from '@nestjs/common';
+import { JwtService } from '@nestjs/jwt';
+import { JwtPayloadDto } from '../../api-v1/auth/dto/jwt-payload.dto';
+
+@Injectable()
+export class ImmichJwtService {
+  constructor(private jwtService: JwtService) {}
+
+  public async generateToken(payload: JwtPayloadDto) {
+    return this.jwtService.sign({
+      ...payload,
+    });
+  }
+}

server/src/modules/immich-jwt/strategies/jwt.strategy.ts

@@ -0,0 +1,33 @@
+import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { PassportStrategy } from '@nestjs/passport';
+import { InjectRepository } from '@nestjs/typeorm';
+import { ExtractJwt, Strategy } from 'passport-jwt';
+import { Repository } from 'typeorm';
+import { JwtPayloadDto } from '../../../api-v1/auth/dto/jwt-payload.dto';
+import { UserEntity } from '../../../api-v1/user/entities/user.entity';
+import { jwtSecret } from '../../../constants/jwt.constant';
+
+@Injectable()
+export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
+  constructor(
+    @InjectRepository(UserEntity)
+    private usersRepository: Repository<UserEntity>,
+  ) {
+    super({
+      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),
+      ignoreExpiration: false,
+      secretOrKey: jwtSecret,
+    });
+  }
+
+  async validate(payload: JwtPayloadDto) {
+    const { userId } = payload;
+    const user = await this.usersRepository.findOne({ id: userId });
+
+    if (!user) {
+      throw new UnauthorizedException('Failure to validate JWT payload');
+    }
+
+    return user;
+  }
+}