change jwt data

backend/src/managers/auth/auth.service.ts

@@ -13,7 +13,10 @@ export class AuthManagerService {
 
   async createToken(user: EUserBackend): Promise<string> {
     const jwtData: JwtDataDto = plainToClass(JwtDataDto, {
-      user,
+      user: {
+        username: user.username,
+        roles: user.roles,
+      },
     });
 
     const errors = await strictValidate(jwtData);

backend/src/managers/auth/guards/jwt.strategy.ts

@@ -1,8 +1,7 @@
 import {
   Inject,
   Injectable,
-  Logger,
+  Logger
-  UnauthorizedException
 } from '@nestjs/common';
 import { PassportStrategy } from '@nestjs/passport';
 import { plainToClass } from 'class-transformer';
@@ -23,14 +22,14 @@ export class JwtStrategy extends PassportStrategy(Strategy, 'jwt') {
     });
   }
 
-  async validate(payload: any): Promise<EUserBackend> {
+  async validate(payload: any): Promise<EUserBackend | false> {
     const jwt = plainToClass(JwtDataDto, payload);
 
     const errors = await strictValidate(jwt);
 
     if (errors.length > 0) {
       this.logger.warn(errors);
-      throw new UnauthorizedException();
+      return false;
     }
 
     return jwt.user;

shared/src/dto/jwt.dto.ts

@@ -1,12 +1,12 @@
 import { Type } from 'class-transformer';
 import { IsDefined, IsInt, IsOptional, ValidateNested } from 'class-validator';
-import { EUser } from '../entities/user.entity';
+import { RoledUser } from '../entities/user.entity';
 
 export class JwtDataDto {
   @IsDefined()
   @ValidateNested()
-  @Type(() => EUser)
+  @Type(() => RoledUser)
-  user: EUser;
+  user: RoledUser;
 
   @IsOptional()
   @IsInt()

shared/src/entities/user.entity.ts

@@ -29,15 +29,18 @@ export class SimpleUser extends SimpleUsername {
   password: string;
 }
 
-// Actual entity that goes in the db
+// Add a user object with just the username and roles for jwt
-export class EUser extends SimpleUsername {
+export class RoledUser extends SimpleUsername {
-  @IsOptional()
-  @IsInt()
-  id?: number;
-
   @IsArray()
   @IsString({ each: true })
   roles: Roles;
+}
+
+// Actual entity that goes in the db
+export class EUser extends RoledUser {
+  @IsOptional()
+  @IsInt()
+  id?: number;
 
   @IsOptional()
   @Exclude()