import { CanActivate, ExecutionContext, Injectable, UnauthorizedException, } from '@nestjs/common'; import { JwtService } from '@nestjs/jwt'; import { Request } from 'express'; import { ConfigService } from '@nestjs/config'; @Injectable() export class AuthGuard implements CanActivate { constructor( private jwtService: JwtService, private configService: ConfigService ) {} async canActivate(context: ExecutionContext): Promise { const request = context.switchToHttp().getRequest(); const token = this.extractTokenFromHeader(request); if (!token) { throw new UnauthorizedException('token faltante'); } try { const payload = await this.jwtService.verifyAsync( token, { secret: this.configService.get('JWT_SECRET'), } ); request['user'] = payload; } catch { throw new UnauthorizedException('algo fallo'); } return true; } private extractTokenFromHeader(request: Request): string | undefined { const [type, token] = request.headers.authorization?.split(' ') ?? []; return type === 'Bearer' ? token : undefined; } }