mirror of
https://github.com/immich-app/immich.git
synced 2025-01-04 02:46:47 +01:00
f230b3aa42
feat(server): api auth permissions
49 lines
1.7 KiB
TypeScript
49 lines
1.7 KiB
TypeScript
import { Body, Controller, Delete, Get, HttpCode, HttpStatus, Param, Post, Put } from '@nestjs/common';
|
|
import { ApiTags } from '@nestjs/swagger';
|
|
import { APIKeyCreateDto, APIKeyCreateResponseDto, APIKeyResponseDto, APIKeyUpdateDto } from 'src/dtos/api-key.dto';
|
|
import { AuthDto } from 'src/dtos/auth.dto';
|
|
import { Permission } from 'src/enum';
|
|
import { Auth, Authenticated } from 'src/middleware/auth.guard';
|
|
import { APIKeyService } from 'src/services/api-key.service';
|
|
import { UUIDParamDto } from 'src/validation';
|
|
|
|
@ApiTags('API Keys')
|
|
@Controller('api-keys')
|
|
export class APIKeyController {
|
|
constructor(private service: APIKeyService) {}
|
|
|
|
@Post()
|
|
@Authenticated({ permission: Permission.API_KEY_CREATE })
|
|
createApiKey(@Auth() auth: AuthDto, @Body() dto: APIKeyCreateDto): Promise<APIKeyCreateResponseDto> {
|
|
return this.service.create(auth, dto);
|
|
}
|
|
|
|
@Get()
|
|
@Authenticated({ permission: Permission.API_KEY_READ })
|
|
getApiKeys(@Auth() auth: AuthDto): Promise<APIKeyResponseDto[]> {
|
|
return this.service.getAll(auth);
|
|
}
|
|
|
|
@Get(':id')
|
|
@Authenticated({ permission: Permission.API_KEY_READ })
|
|
getApiKey(@Auth() auth: AuthDto, @Param() { id }: UUIDParamDto): Promise<APIKeyResponseDto> {
|
|
return this.service.getById(auth, id);
|
|
}
|
|
|
|
@Put(':id')
|
|
@Authenticated({ permission: Permission.API_KEY_UPDATE })
|
|
updateApiKey(
|
|
@Auth() auth: AuthDto,
|
|
@Param() { id }: UUIDParamDto,
|
|
@Body() dto: APIKeyUpdateDto,
|
|
): Promise<APIKeyResponseDto> {
|
|
return this.service.update(auth, id, dto);
|
|
}
|
|
|
|
@Delete(':id')
|
|
@HttpCode(HttpStatus.NO_CONTENT)
|
|
@Authenticated({ permission: Permission.API_KEY_DELETE })
|
|
deleteApiKey(@Auth() auth: AuthDto, @Param() { id }: UUIDParamDto): Promise<void> {
|
|
return this.service.delete(auth, id);
|
|
}
|
|
}
|