forked from Shared/esg
s.hajizadeh
45ef396466
Implement normalized error handling with Persian translations across all exception types, replace legacy NestJS exceptions with AppException, and add unit, integration, and smoke tests. - Add error catalog with gateway-owned codes and Persian messages - Introduce AppException wrapping normalized error envelopes - Add translateError helper for automatic messageFa population - Remove claims module and update provider error normalization - Add unit tests for error contracts and helper functions - Add integration tests for admin and inquiry endpoints - Add smoke tests for real provider connectivity - Add test support utilities (auth mocks, assertions, app factory)
35 lines
1017 B
TypeScript
35 lines
1017 B
TypeScript
import {
|
|
CanActivate,
|
|
ExecutionContext,
|
|
Injectable,
|
|
} from '@nestjs/common';
|
|
import { ConfigService } from '@nestjs/config';
|
|
import { Request } from 'express';
|
|
import { API_KEY_HEADER } from '../../common/constants/app.constants';
|
|
import { AppException } from '../../common/exceptions/app-exception';
|
|
|
|
/**
|
|
* API key authentication for inquiry endpoints.
|
|
* Expects x-api-key header matching configured API_KEY.
|
|
*/
|
|
@Injectable()
|
|
export class ApiKeyGuard implements CanActivate {
|
|
constructor(private readonly configService: ConfigService) {}
|
|
|
|
canActivate(context: ExecutionContext): boolean {
|
|
const request = context.switchToHttp().getRequest<Request>();
|
|
const apiKey = request.headers[API_KEY_HEADER] as string | undefined;
|
|
const expected = this.configService.get<string>('auth.apiKey');
|
|
|
|
if (!expected) {
|
|
throw new AppException('API_KEY_NOT_CONFIGURED');
|
|
}
|
|
|
|
if (!apiKey || apiKey !== expected) {
|
|
throw new AppException('INVALID_API_KEY');
|
|
}
|
|
|
|
return true;
|
|
}
|
|
}
|