api-AT/src/user/jwt.guard.ts

import { ExecutionContext, Injectable, ForbiddenException } from '@nestjs/common';
import { AuthGuard } from '@nestjs/passport';

@Injectable()
export class JwtAuthGuard extends AuthGuard('jwt') {
  handleRequest(err: any, user: any, info: any, context: ExecutionContext) {
    if (err || !user) {
      throw new ForbiddenException('Acceso denegado: token inválido o ausente');
    }
    return user;
  }
}